<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.756873,1.435000,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="119.114.249.123" dst_ip="131.163.145.155" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1422853299"/>
        <to usec="0" sec="1422853301"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="93.38.190.217" dst_ip="205.162.44.7" src_port="80" dst_port="57528" proto="tcp"/>
        </slice>
        <from usec="0" sec="1422853336"/>
        <to usec="0" sec="1422853338"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="126.149.95.39" dst_ip="131.163.238.225" src_port="80" dst_port="53517" proto="tcp"/>
        </slice>
        <from usec="0" sec="1422853348"/>
        <to usec="0" sec="1422853386"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="119.99.3.88" dst_ip="205.162.57.36" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1422853358"/>
        <to usec="0" sec="1422853360"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="119.100.175.44" dst_ip="129.205.98.22" src_port="443" dst_port="49468" proto="tcp"/>
        </slice>
        <from usec="0" sec="1422853282"/>
        <to usec="0" sec="1422853284"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="169.112.254.37" dst_ip="200.207.175.48" src_port="49395" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1422853481"/>
        <to usec="0" sec="1422853483"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="205.162.56.146"/>
        </slice>
        <from usec="0" sec="1422853214"/>
        <to usec="0" sec="1422853221"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="205.171.121.250" dst_ip="131.163.137.159" src_port="17186" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1422853736"/>
        <to usec="0" sec="1422853739"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="205.162.57.236" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1422853229"/>
        <to usec="0" sec="1422853739"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="173.208.0.34" dst_ip="119.95.67.218" src_port="62115" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1422853219"/>
        <to usec="0" sec="1422853330"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="61.194.138.137"/>
        </slice>
        <from usec="0" sec="1422853668"/>
        <to usec="0" sec="1422853672"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="131.163.237.34" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1422853671"/>
        <to usec="0" sec="1422853675"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="89.90.135.218"/>
        </slice>
        <from usec="0" sec="1422853501"/>
        <to usec="0" sec="1422853512"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="173.208.192.239"/>
        </slice>
        <from usec="0" sec="1422853220"/>
        <to usec="0" sec="1422853241"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="210.132.48.147"/>
        </slice>
        <from usec="0" sec="1422853459"/>
        <to usec="0" sec="1422853462"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="86.221.148.29"/>
        </slice>
        <from usec="0" sec="1422853318"/>
        <to usec="0" sec="1422853321"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="23.189.3.181"/>
        </slice>
        <from usec="0" sec="1422853642"/>
        <to usec="0" sec="1422853645"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.85.159.89" dst_port="23"/>
        </slice>
        <from usec="0" sec="1422853519"/>
        <to usec="0" sec="1422853521"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="77.44.255.60" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1422853478"/>
        <to usec="0" sec="1422853494"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="80.10.193.161" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1422853215"/>
        <to usec="0" sec="1422853222"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="131.163.98.212"/>
        </slice>
        <from usec="0" sec="1422853255"/>
        <to usec="0" sec="1422853257"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="24.152.160.56"/>
        </slice>
        <from usec="0" sec="1422853493"/>
        <to usec="0" sec="1422853503"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="30.155.206.66" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1422853201"/>
        <to usec="0" sec="1422853204"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="11.21.191.34" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1422853518"/>
        <to usec="0" sec="1422853520"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="23.6.196.214" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1422853240"/>
        <to usec="0" sec="1422853252"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="97.246.141.100" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1422853428"/>
        <to usec="0" sec="1422853430"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.115.58.76" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1422853218"/>
        <to usec="0" sec="1422853222"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="25.255.213.206"/>
        </slice>
        <from usec="0" sec="1422853435"/>
        <to usec="0" sec="1422853437"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="15.50.218.251" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1422853355"/>
        <to usec="0" sec="1422853368"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="163.139.20.15" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1422853229"/>
        <to usec="0" sec="1422853241"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="25.4.254.76"/>
        </slice>
        <from usec="0" sec="1422853393"/>
        <to usec="0" sec="1422853417"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.231.131.171" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1422853241"/>
        <to usec="0" sec="1422853266"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="22.61.13.191" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1422853201"/>
        <to usec="0" sec="1422853203"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="80.10.245.163" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1422853298"/>
        <to usec="0" sec="1422853312"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="104.6.240.192"/>
        </slice>
        <from usec="0" sec="1422853507"/>
        <to usec="0" sec="1422853517"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="215.8.37.83"/>
        </slice>
        <from usec="0" sec="1422853261"/>
        <to usec="0" sec="1422853263"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="156.195.29.130" dst_port="23"/>
        </slice>
        <from usec="0" sec="1422853320"/>
        <to usec="0" sec="1422853330"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="131.163.125.205"/>
        </slice>
        <from usec="0" sec="1422853497"/>
        <to usec="0" sec="1422853499"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="212.40.40.64"/>
        </slice>
        <from usec="0" sec="1422853251"/>
        <to usec="0" sec="1422853253"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="15.73.110.90"/>
        </slice>
        <from usec="0" sec="1422853256"/>
        <to usec="0" sec="1422853261"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="156.187.36.188"/>
        </slice>
        <from usec="0" sec="1422853312"/>
        <to usec="0" sec="1422853320"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="16.33.35.224"/>
        </slice>
        <from usec="0" sec="1422853209"/>
        <to usec="0" sec="1422853220"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="189.121.90.48"/>
        </slice>
        <from usec="0" sec="1422853242"/>
        <to usec="0" sec="1422853245"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="169.112.172.46"/>
        </slice>
        <from usec="0" sec="1422853259"/>
        <to usec="0" sec="1422853261"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="17.84.211.233" proto="icmp"/>
        </slice>
        <from usec="0" sec="1422853304"/>
        <to usec="0" sec="1422853306"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="156.187.36.188" proto="icmp"/>
        </slice>
        <from usec="0" sec="1422853313"/>
        <to usec="0" sec="1422853314"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.139.107.194"/>
        </slice>
        <from usec="0" sec="1422853361"/>
        <to usec="0" sec="1422853370"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="157.165.44.56"/>
        </slice>
        <from usec="0" sec="1422853256"/>
        <to usec="0" sec="1422853258"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="126.134.108.207"/>
        </slice>
        <from usec="0" sec="1422853256"/>
        <to usec="0" sec="1422853258"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="212.137.173.245"/>
        </slice>
        <from usec="0" sec="1422853297"/>
        <to usec="0" sec="1422853306"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="210.149.52.135"/>
        </slice>
        <from usec="0" sec="1422853384"/>
        <to usec="0" sec="1422853390"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="104.189.201.77"/>
        </slice>
        <from usec="0" sec="1422853465"/>
        <to usec="0" sec="1422853470"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="15.42.198.142"/>
        </slice>
        <from usec="0" sec="1422853404"/>
        <to usec="0" sec="1422853406"/>
    </anomaly>
    <anomaly type="notice" value="0.812479,1.244470,503,1 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="205.162.158.84" dst_port="443"/>
            <filter src_ip="205.162.158.84" dst_port="80"/>
            <filter dst_ip="140.173.198.125" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="189.121.71.37"/>
        </slice>
        <from usec="0" sec="1422853266"/>
        <to usec="0" sec="1422853268"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="61.2.51.228"/>
        </slice>
        <from usec="0" sec="1422853209"/>
        <to usec="0" sec="1422853449"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="173.208.192.43"/>
        </slice>
        <from usec="0" sec="1422853200"/>
        <to usec="0" sec="1422853308"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="112.142.76.247"/>
        </slice>
        <from usec="0" sec="1422853200"/>
        <to usec="0" sec="1422853295"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="19.109.59.161"/>
        </slice>
        <from usec="0" sec="1422853205"/>
        <to usec="0" sec="1422853287"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="131.163.173.196"/>
        </slice>
        <from usec="0" sec="1422853200"/>
        <to usec="0" sec="1422853398"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="189.121.225.226"/>
        </slice>
        <from usec="0" sec="1422853200"/>
        <to usec="0" sec="1422853397"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="178.104.223.105"/>
        </slice>
        <from usec="0" sec="1422853201"/>
        <to usec="0" sec="1422853364"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="223.208.82.34"/>
        </slice>
        <from usec="0" sec="1422853203"/>
        <to usec="0" sec="1422853228"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="204.52.233.115"/>
        </slice>
        <from usec="0" sec="1422853204"/>
        <to usec="0" sec="1422853469"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.13.159.63"/>
        </slice>
        <from usec="0" sec="1422853206"/>
        <to usec="0" sec="1422853379"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="131.163.128.229"/>
        </slice>
        <from usec="0" sec="1422853206"/>
        <to usec="0" sec="1422853393"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="119.97.225.44"/>
        </slice>
        <from usec="0" sec="1422853207"/>
        <to usec="0" sec="1422853386"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="13.175.27.42"/>
        </slice>
        <from usec="0" sec="1422853212"/>
        <to usec="0" sec="1422853220"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="169.105.227.147"/>
        </slice>
        <from usec="0" sec="1422853217"/>
        <to usec="0" sec="1422853262"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.105.122.59"/>
        </slice>
        <from usec="0" sec="1422853240"/>
        <to usec="0" sec="1422853311"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="204.152.141.123"/>
        </slice>
        <from usec="0" sec="1422853241"/>
        <to usec="0" sec="1422853358"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="178.104.223.14"/>
        </slice>
        <from usec="0" sec="1422853244"/>
        <to usec="0" sec="1422853395"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="178.104.223.96"/>
        </slice>
        <from usec="0" sec="1422853315"/>
        <to usec="0" sec="1422853382"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="49.46.242.128"/>
        </slice>
        <from usec="0" sec="1422853322"/>
        <to usec="0" sec="1422853396"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="119.93.122.118"/>
        </slice>
        <from usec="0" sec="1422853354"/>
        <to usec="0" sec="1422853356"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,010,0 0 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="212.250.182.172"/>
        </slice>
        <from usec="0" sec="1422853370"/>
        <to usec="0" sec="1422853378"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="1.211.147.179"/>
        </slice>
        <from usec="0" sec="1422853200"/>
        <to usec="0" sec="1422853487"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="19.175.2.91"/>
        </slice>
        <from usec="0" sec="1422853200"/>
        <to usec="0" sec="1422853488"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="16.180.19.70"/>
        </slice>
        <from usec="0" sec="1422853200"/>
        <to usec="0" sec="1422853488"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="23.30.8.31"/>
        </slice>
        <from usec="0" sec="1422853200"/>
        <to usec="0" sec="1422853487"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACKt">
        <slice>
            <filter src_ip="173.208.103.3"/>
        </slice>
        <from usec="0" sec="1422853200"/>
        <to usec="0" sec="1422853485"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="42.4.131.255"/>
        </slice>
        <from usec="0" sec="1422853201"/>
        <to usec="0" sec="1422853488"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="59.213.150.210"/>
        </slice>
        <from usec="0" sec="1422853202"/>
        <to usec="0" sec="1422853472"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="86.236.130.33"/>
        </slice>
        <from usec="0" sec="1422853203"/>
        <to usec="0" sec="1422853488"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="141.109.152.57"/>
        </slice>
        <from usec="0" sec="1422853203"/>
        <to usec="0" sec="1422853485"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="92.173.246.205"/>
        </slice>
        <from usec="0" sec="1422853204"/>
        <to usec="0" sec="1422853481"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="131.163.202.198"/>
        </slice>
        <from usec="0" sec="1422853204"/>
        <to usec="0" sec="1422853484"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="155.255.252.3"/>
        </slice>
        <from usec="0" sec="1422853206"/>
        <to usec="0" sec="1422853486"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="195.49.216.144"/>
        </slice>
        <from usec="0" sec="1422853207"/>
        <to usec="0" sec="1422853477"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="205.162.57.39"/>
        </slice>
        <from usec="0" sec="1422853208"/>
        <to usec="0" sec="1422853360"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="178.104.223.36"/>
        </slice>
        <from usec="0" sec="1422853208"/>
        <to usec="0" sec="1422853457"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="205.162.56.227"/>
        </slice>
        <from usec="0" sec="1422853214"/>
        <to usec="0" sec="1422853459"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="131.163.88.18"/>
        </slice>
        <from usec="0" sec="1422853215"/>
        <to usec="0" sec="1422853486"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="195.72.255.131"/>
        </slice>
        <from usec="0" sec="1422853218"/>
        <to usec="0" sec="1422853430"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="100.37.105.180"/>
        </slice>
        <from usec="0" sec="1422853218"/>
        <to usec="0" sec="1422853469"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="212.232.224.253"/>
        </slice>
        <from usec="0" sec="1422853227"/>
        <to usec="0" sec="1422853366"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="112.167.113.125"/>
        </slice>
        <from usec="0" sec="1422853254"/>
        <to usec="0" sec="1422853472"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="49.126.84.162"/>
        </slice>
        <from usec="0" sec="1422853270"/>
        <to usec="0" sec="1422853484"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="119.65.103.78"/>
        </slice>
        <from usec="0" sec="1422853286"/>
        <to usec="0" sec="1422853482"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.158.244.56"/>
        </slice>
        <from usec="0" sec="1422853366"/>
        <to usec="0" sec="1422853375"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="77.213.211.161"/>
        </slice>
        <from usec="0" sec="1422853366"/>
        <to usec="0" sec="1422853375"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="148.27.127.211"/>
        </slice>
        <from usec="0" sec="1422853401"/>
        <to usec="0" sec="1422853471"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="112.194.0.153"/>
        </slice>
        <from usec="0" sec="1422853405"/>
        <to usec="0" sec="1422853464"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="123.57.66.191"/>
        </slice>
        <from usec="0" sec="1422853461"/>
        <to usec="0" sec="1422853476"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="10.85.243.5"/>
        </slice>
        <from usec="0" sec="1422853200"/>
        <to usec="0" sec="1422853577"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="33.145.88.17"/>
        </slice>
        <from usec="0" sec="1422853200"/>
        <to usec="0" sec="1422853578"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="189.58.32.71"/>
        </slice>
        <from usec="0" sec="1422853200"/>
        <to usec="0" sec="1422853578"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="25.197.165.61"/>
        </slice>
        <from usec="0" sec="1422853200"/>
        <to usec="0" sec="1422853489"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="204.52.231.119" src_port="53"/>
        </slice>
        <from usec="0" sec="1422853201"/>
        <to usec="0" sec="1422853577"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="190.122.80.59"/>
        </slice>
        <from usec="0" sec="1422853201"/>
        <to usec="0" sec="1422853578"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="158.17.195.0"/>
        </slice>
        <from usec="0" sec="1422853202"/>
        <to usec="0" sec="1422853571"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="169.112.183.172"/>
        </slice>
        <from usec="0" sec="1422853202"/>
        <to usec="0" sec="1422853568"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="56.84.90.168"/>
        </slice>
        <from usec="0" sec="1422853202"/>
        <to usec="0" sec="1422853557"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.244.190.26"/>
        </slice>
        <from usec="0" sec="1422853202"/>
        <to usec="0" sec="1422853577"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="131.163.239.232"/>
        </slice>
        <from usec="0" sec="1422853204"/>
        <to usec="0" sec="1422853562"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="8.201.84.36"/>
        </slice>
        <from usec="0" sec="1422853205"/>
        <to usec="0" sec="1422853575"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="169.112.77.193"/>
        </slice>
        <from usec="0" sec="1422853206"/>
        <to usec="0" sec="1422853568"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="169.112.169.119"/>
        </slice>
        <from usec="0" sec="1422853208"/>
        <to usec="0" sec="1422853567"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="106.82.111.80"/>
        </slice>
        <from usec="0" sec="1422853212"/>
        <to usec="0" sec="1422853578"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="210.246.182.66"/>
        </slice>
        <from usec="0" sec="1422853214"/>
        <to usec="0" sec="1422853570"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="52.151.242.249"/>
        </slice>
        <from usec="0" sec="1422853223"/>
        <to usec="0" sec="1422853502"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="92.187.222.161"/>
        </slice>
        <from usec="0" sec="1422853234"/>
        <to usec="0" sec="1422853566"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.133.29.189"/>
        </slice>
        <from usec="0" sec="1422853306"/>
        <to usec="0" sec="1422853438"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="169.112.187.245"/>
        </slice>
        <from usec="0" sec="1422853321"/>
        <to usec="0" sec="1422853575"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="112.131.36.154"/>
        </slice>
        <from usec="0" sec="1422853334"/>
        <to usec="0" sec="1422853541"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="52.79.10.227"/>
        </slice>
        <from usec="0" sec="1422853367"/>
        <to usec="0" sec="1422853455"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter dst_ip="176.222.80.226"/>
        </slice>
        <from usec="0" sec="1422853414"/>
        <to usec="0" sec="1422853427"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="161.117.149.56"/>
        </slice>
        <from usec="0" sec="1422853418"/>
        <to usec="0" sec="1422853467"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="112.131.35.224"/>
        </slice>
        <from usec="0" sec="1422853433"/>
        <to usec="0" sec="1422853521"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="16.56.169.42"/>
        </slice>
        <from usec="0" sec="1422853463"/>
        <to usec="0" sec="1422853465"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="38.167.43.66"/>
        </slice>
        <from usec="0" sec="1422853471"/>
        <to usec="0" sec="1422853476"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="169.112.101.75"/>
        </slice>
        <from usec="0" sec="1422853482"/>
        <to usec="0" sec="1422853503"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="49.126.85.173"/>
        </slice>
        <from usec="0" sec="1422853523"/>
        <to usec="0" sec="1422853525"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="213.67.250.92"/>
        </slice>
        <from usec="0" sec="1422853525"/>
        <to usec="0" sec="1422853558"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,504,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="1.249.248.183"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,011,0 0 0 1 0 0 0 0 0 1 0 0,point_to_point">
        <slice>
            <filter src_ip="2.59.170.216" dst_ip="189.121.217.109" src_port="3000"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="2.60.213.209" dst_ip="169.109.44.172" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="13.168.179.89"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,011,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="13.15.227.227"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="12.63.206.179"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="15.184.229.141"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.718046,1.279010,010,1 0 0 0 0 0 0 0 0 1 1 0,ntscSYNt">
        <slice>
            <filter src_ip="30.141.238.0" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="31.228.84.240"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,010,0 0 0 0 0 0 0 0 0 1 0 0,ntscSYNt">
        <slice>
            <filter src_ip="29.18.149.124"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="26.174.152.74"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.749772,1.304150,010,1 0 0 1 0 0 0 0 0 1 0 0,ntscSYNt">
        <slice>
            <filter src_ip="25.105.227.145" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,999,0 0 0 1 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="21.185.130.151" dst_ip="204.52.225.121" src_port="61777" dst_port="9987"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="21.187.239.152"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,503,0 0 0 1 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="16.82.232.142" dst_ip="189.121.227.182" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,504,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="16.255.104.82"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="17.113.247.82"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="17.44.255.253"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="17.44.255.252"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="19.213.59.30"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,503,0 0 0 1 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="19.13.131.83" dst_ip="205.170.86.63" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,504,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="19.199.234.139"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="173.208.192.41"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="173.208.192.79"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.718046,1.279010,504,1 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="173.208.238.105" dst_port="443"/>
            <filter src_ip="173.208.238.105" dst_ip="76.175.167.197" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="173.208.149.0"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,503,0 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="173.208.19.79" dst_port="80"/>
            <filter dst_ip="55.126.201.18" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="173.208.7.13"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.749772,1.304150,503,1 0 0 1 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="169.105.68.97" dst_ip="222.189.188.51" src_port="49306" dst_port="80"/>
            <filter src_ip="169.105.68.97" dst_ip="222.189.188.51" src_port="49305" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.646240,1.337150,504,1 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="48.192.138.136" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,504,0 0 0 1 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="169.112.95.78" dst_port="80"/>
            <filter src_ip="169.112.95.78" dst_ip="55.75.142.180" dst_port="443"/>
            <filter src_ip="169.112.95.78" dst_ip="123.218.136.218" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.112.96.0"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.819036,1.380980,504,1 0 0 0 0 0 0 0 0 0 1 0,ptmpla">
        <slice>
            <filter src_ip="169.112.97.217" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="169.112.46.42"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,999,0 0 0 1 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="169.112.46.181" src_port="64792"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,020,0 0 0 0 0 0 0 0 0 1 0 0,icmp_error">
        <slice>
            <filter src_ip="169.112.233.255"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.112.238.38" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="178.104.223.44"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="178.104.223.100"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,ntscACKt">
        <slice>
            <filter src_ip="131.163.38.153"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.646240,1.337150,503,1 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="131.163.91.108" dst_ip="199.207.52.5" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,504,0 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="169.112.255.1" dst_port="443"/>
            <filter src_ip="131.163.91.123" dst_port="443"/>
            <filter src_ip="169.112.221.75" dst_ip="112.142.88.198"/>
            <filter src_ip="169.112.221.75" dst_port="443"/>
            <filter dst_ip="112.142.88.198" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="131.163.91.32" src_port="43633"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,503,0 0 0 1 0 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="131.163.91.56" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="131.163.89.200" dst_ip="89.73.168.42" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="131.163.89.123" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="131.163.89.71"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.718046,1.279010,504,1 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="131.163.188.184" dst_ip="222.189.171.247" src_port="50660" dst_port="443"/>
            <filter src_ip="131.163.188.184" dst_ip="222.189.171.247" src_port="50659" dst_port="443"/>
            <filter src_ip="131.163.188.184" dst_ip="222.189.171.247" src_port="50653" dst_port="443"/>
            <filter src_ip="131.163.188.184" dst_ip="222.189.171.247" src_port="50643" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="131.163.139.69"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="131.163.139.186"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="131.163.136.5" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="131.163.135.199"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="131.163.28.27"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,999,0 0 0 1 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="148.93.204.121" src_port="36827" dst_port="53413"/>
            <filter src_ip="148.93.204.121" src_port="33497" dst_port="53413"/>
            <filter src_ip="148.93.204.121" src_port="48857" dst_port="53413"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="148.93.204.104" src_port="48356" dst_port="53413"/>
            <filter src_ip="148.93.204.104" src_port="56885" dst_port="53413"/>
            <filter src_ip="148.93.204.104" src_port="49775" dst_port="53413"/>
            <filter src_ip="148.93.204.104" src_port="60022" dst_port="53413"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="149.233.176.206"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,503,0 0 0 1 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="151.156.11.38" dst_ip="169.112.254.20" src_port="80" dst_port="1900"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="144.12.131.183"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="147.144.58.80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.646240,1.337150,503,1 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="195.22.16.193" dst_ip="52.151.242.37" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,504,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="194.217.98.149"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,011,0 0 0 0 0 0 0 0 0 1 0 0,heavy_hitter">
        <slice>
            <filter src_ip="198.237.168.147"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.718046,1.279010,503,1 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="198.153.116.124" dst_ip="169.112.179.219" src_port="80" dst_port="57394"/>
            <filter src_ip="198.153.116.124" dst_ip="169.112.179.219" src_port="80" dst_port="57341"/>
            <filter src_ip="198.153.116.124" dst_ip="169.112.179.219" src_port="80" dst_port="57137"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,503,0 0 0 1 0 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="205.162.44.7" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="205.162.50.129"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.756873,1.435000,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="173.208.89.41" dst_ip="198.153.116.104" src_port="54275" dst_port="80"/>
        </slice>
        <from usec="0" sec="1422853358"/>
        <to usec="0" sec="1422853467"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="205.162.156.37"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,020,0 0 0 0 0 0 0 0 0 1 0 0,icmp_error">
        <slice>
            <filter src_ip="205.170.97.44" src_port="33435"/>
            <filter src_ip="205.170.97.44"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="205.123.114.141"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="204.52.231.117"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,020,0 0 0 0 0 0 0 0 0 1 0 0,icmp_error">
        <slice>
            <filter src_ip="204.52.229.21"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,020,0 0 0 0 0 0 0 0 0 1 0 0,icmp_error">
        <slice>
            <filter src_ip="204.52.227.161"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,020,0 0 0 0 0 0 0 0 0 1 0 0,ttl_error">
        <slice>
            <filter src_ip="204.52.226.254"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="204.52.224.43"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="204.52.225.76" src_port="61963"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="204.52.248.250"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="222.239.18.140"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="223.127.65.223" dst_port="8080"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.718046,1.279010,503,1 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter dst_port="1900"/>
            <filter src_ip="213.197.171.27" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,ipv46tun">
        <slice>
            <filter src_ip="214.41.233.69"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,502,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="212.249.191.81"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.646240,1.337150,010,1 0 0 0 0 0 0 0 0 1 0 0,ntscSYNt">
        <slice>
            <filter src_ip="213.128.99.232" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,504,0 0 0 1 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="119.110.197.195" dst_ip="205.162.158.195" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,504,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="123.218.136.218" src_port="443"/>
            <filter dst_ip="205.162.49.222" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,999,0 0 0 1 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="126.110.226.190" dst_ip="189.121.39.10" src_port="6360" dst_port="34955"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,010,0 0 0 1 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="123.94.123.247" dst_port="9064"/>
            <filter src_ip="123.94.123.247" dst_port="8088"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="79.149.41.172"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.718046,1.279010,010,1 0 0 0 0 0 0 0 0 1 1 0,ntscSYNt">
        <slice>
            <filter src_ip="64.190.72.177" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="68.99.81.57"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,999,0 0 0 1 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="69.169.182.108" dst_ip="169.112.254.20" src_port="36526" dst_port="1900"/>
            <filter src_ip="69.169.182.108" dst_ip="169.112.254.20"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,504,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="83.76.34.108"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="83.247.87.226"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="86.200.13.162"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.718046,1.279010,503,1 0 0 0 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="189.121.226.168" src_port="80"/>
            <filter dst_ip="189.121.226.168" dst_port="14820"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="93.222.174.103"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="92.216.251.128"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,999,0 0 0 1 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="92.217.217.33" dst_ip="189.121.175.28" src_port="38351" dst_port="12927"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="92.182.118.134"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="94.132.63.190" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="95.98.44.71"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="49.196.128.11"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="51.199.49.41"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,503,0 0 0 1 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="51.193.250.109" dst_ip="205.162.56.57" src_port="80"/>
            <filter src_ip="51.193.250.109" dst_ip="189.121.225.204" src_port="80"/>
            <filter src_ip="51.193.250.109" dst_ip="189.121.44.150" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="51.204.0.27"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="50.252.149.74" dst_port="3306"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="50.252.149.72"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="50.252.149.70" dst_port="3306"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="50.252.149.67"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,010,0 0 0 1 0 0 0 0 0 1 1 0,sntscSYNt">
        <slice>
            <filter src_ip="50.252.149.66" dst_port="3306"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="50.252.149.65"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="50.252.149.81" dst_port="3306"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="50.252.149.85"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="50.252.149.84"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="50.252.149.89"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="50.252.149.94"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="50.252.149.92" dst_port="3306"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,999,0 0 0 1 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="59.93.83.30" dst_ip="131.163.91.135" src_port="1935" dst_port="51795"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="47.70.73.35"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="32.238.11.153"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="35.163.10.163"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="4.97.95.48" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,502,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="2.19.232.134"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,502,0 0 0 1 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="2.19.232.220" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,502,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="204.52.250.252" dst_ip="2.19.232.222"/>
            <filter src_ip="204.52.250.252" dst_ip="88.38.214.35" src_port="22"/>
            <filter src_ip="204.52.246.134" dst_ip="2.19.232.222" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,502,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="204.52.232.100" src_port="22"/>
            <filter dst_ip="2.19.232.236" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="2.63.15.208"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="8.185.52.133"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="8.200.224.28"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,020,0 0 0 0 0 0 0 0 0 1 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="11.170.247.18"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="131.163.98.218" src_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,504,0 0 0 1 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="205.162.158.227" dst_ip="14.130.10.125" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="29.154.95.237"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="204.52.225.121" dst_ip="88.38.214.35" src_port="22" dst_port="56813"/>
            <filter src_ip="204.52.225.121" dst_ip="21.185.130.151" src_port="9987" dst_port="61777"/>
            <filter src_ip="204.52.225.121" dst_ip="158.28.210.173" src_port="1723" dst_port="22205"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="169.244.176.195" src_port="53"/>
            <filter src_ip="169.244.176.175" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,504,0 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="205.170.111.21" dst_port="443"/>
            <filter src_ip="205.170.111.21" dst_port="80"/>
            <filter dst_ip="37.99.109.160" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,503,0 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="119.114.249.107" src_port="80"/>
            <filter src_ip="112.143.179.86" src_port="443"/>
            <filter dst_ip="131.163.91.98" src_port="80"/>
            <filter dst_ip="131.163.91.98" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="173.208.240.22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="92.184.192.223" src_port="443"/>
            <filter src_ip="92.184.192.223" dst_ip="173.208.22.233" src_port="80"/>
        </slice>
        <from usec="0" sec="1422853200"/>
        <to usec="0" sec="1422853456"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,503,0 0 0 1 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="173.208.246.23" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="173.208.30.94" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="169.109.68.92"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="169.244.176.193"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,504,0 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_port="443"/>
            <filter src_ip="62.143.201.190" src_port="80"/>
            <filter dst_ip="169.203.44.220" src_port="80"/>
            <filter dst_ip="189.121.238.87" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,502,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="212.249.176.247" dst_ip="169.203.73.93" dst_port="22"/>
            <filter src_ip="212.249.176.247" dst_ip="169.112.180.144" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="104.222.213.210" dst_ip="169.203.73.2" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="169.112.95.235" dst_port="17832"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="169.112.253.17" dst_port="6881"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,999,0 0 0 1 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="148.93.204.67" src_port="35829" dst_port="53413"/>
            <filter src_ip="148.93.204.67" src_port="58441" dst_port="53413"/>
            <filter src_ip="148.93.204.67" src_port="57578" dst_port="53413"/>
            <filter src_ip="148.93.204.67" src_port="48321" dst_port="53413"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,503,0 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_port="80"/>
            <filter dst_ip="205.162.155.235" src_port="443"/>
            <filter dst_ip="169.112.252.26" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="169.112.100.203" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="46.7.106.23" dst_ip="169.112.123.185" dst_port="4899"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="169.112.123.23" src_port="53" dst_port="32771"/>
            <filter dst_ip="169.112.123.23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="52.151.242.77" dst_ip="169.112.238.40" src_port="80"/>
            <filter src_ip="55.91.107.187" dst_ip="169.112.238.40" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="169.112.238.128" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,504,0 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter dst_ip="169.203.38.213" src_port="443"/>
            <filter dst_ip="169.112.221.187" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,503,0 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter dst_ip="169.112.187.240" src_port="80"/>
            <filter dst_ip="169.112.187.240" src_port="443"/>
            <filter src_ip="198.180.110.86" dst_ip="189.121.39.134" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="86.248.111.225" dst_ip="169.112.230.100" src_port="80" dst_port="53045"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,010,0 0 0 0 0 0 0 0 0 1 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="169.112.230.36"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="169.112.162.21"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="190.242.109.36"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,504,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="22.115.44.81" dst_port="443"/>
            <filter dst_ip="189.58.32.117" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="189.121.36.237"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="26.114.10.8" dst_ip="189.121.36.66" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,ptmplaHTTP">
        <slice>
            <filter src_ip="198.180.110.86" dst_ip="131.163.82.233" src_port="80"/>
            <filter src_ip="198.180.110.86" dst_ip="189.121.39.134" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter dst_ip="189.121.39.228"/>
            <filter src_ip="112.143.178.182" dst_ip="189.121.227.35" src_port="443"/>
            <filter src_ip="112.143.178.182" dst_ip="189.121.225.163" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="189.121.39.54" dst_port="11460"/>
            <filter dst_ip="189.121.39.54" dst_port="14752"/>
            <filter dst_ip="189.121.39.54"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,503,0 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter dst_ip="189.121.145.70" src_port="80"/>
            <filter dst_ip="131.163.239.2" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,999,0 0 0 1 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="218.209.18.208" dst_ip="189.121.129.61" src_port="3333"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,503,0 0 0 1 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="189.121.139.22" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="189.121.143.231"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="189.121.88.241"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,503,0 0 0 1 0 0 0 0 0 1 1 0,ptmplaHTTP">
        <slice>
            <filter src_ip="158.17.208.98" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="189.121.178.47" dst_port="52101"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="189.121.225.169"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="189.121.225.134"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="189.121.226.161"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,999,0 0 0 1 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="189.121.38.59" dst_port="50684"/>
            <filter dst_ip="189.121.38.59" src_port="27019" dst_port="57949"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="212.166.59.242" src_port="80"/>
            <filter dst_ip="189.121.214.53" src_port="80"/>
            <filter src_ip="2.59.170.216" dst_ip="189.121.217.109" src_port="3000"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,502,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="194.240.160.37" dst_ip="189.121.121.227" src_port="34908" dst_port="22"/>
            <filter src_ip="2.19.232.215" dst_ip="189.121.121.227" src_port="45533" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,054,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="189.121.112.9"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="189.121.112.196"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.749772,1.304150,504,1 0 0 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="189.121.71.63" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,010,0 0 0 0 0 0 0 0 0 1 0 0,point_to_point">
        <slice>
            <filter src_ip="22.150.82.62" dst_ip="189.121.102.238" dst_port="8080"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,504,0 0 0 1 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="189.121.226.134" src_port="443"/>
            <filter dst_ip="189.121.226.134" dst_port="11380"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,999,0 0 0 1 0 0 0 0 0 1 1 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="173.208.253.160" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,504,0 0 0 1 0 0 0 0 0 1 1 0,ntscACK">
        <slice>
            <filter src_ip="173.208.103.255" dst_port="80"/>
            <filter src_ip="173.208.103.255" dst_port="443"/>
            <filter src_ip="173.208.127.143" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="130.65.246.129"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,503,0 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter dst_ip="204.52.248.237"/>
            <filter src_ip="119.114.249.80" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,504,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="156.214.230.173" src_port="80"/>
            <filter dst_ip="131.163.76.51" src_port="443"/>
            <filter dst_ip="131.163.76.51" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.749772,1.304150,503,1 0 0 1 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="49.126.85.122" dst_ip="131.163.38.155" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="131.163.82.54"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="131.163.91.32" dst_port="43633"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="131.163.89.97" dst_port="51413"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,504,0 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="48.192.138.136" src_port="443"/>
            <filter src_ip="35.15.230.109" dst_ip="131.163.88.161" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="28.229.74.148" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.646240,1.337150,503,1 0 0 0 0 0 0 0 0 1 0 0,malphfl">
        <slice>
            <filter src_ip="22.162.133.64" dst_ip="131.163.88.30" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,504,0 0 0 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="131.163.88.32" src_port="443"/>
            <filter dst_ip="131.163.88.32" dst_port="1309"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="131.163.239.252"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,503,0 0 0 1 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="131.163.206.61" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,504,0 0 0 1 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter dst_ip="131.163.188.184" src_port="443"/>
            <filter dst_ip="131.163.188.184" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,point_to_point">
        <slice>
            <filter src_ip="61.108.200.232" dst_ip="131.163.139.183" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,503,0 0 0 1 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="119.73.48.96" dst_ip="131.163.145.0" src_port="80"/>
            <filter src_ip="62.143.202.209" dst_ip="131.163.145.0" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,504,0 0 0 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="131.163.145.29" src_port="80"/>
            <filter dst_ip="131.163.145.29" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.718046,1.279010,999,1 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="86.243.142.164" dst_ip="131.163.147.220" src_port="1935" dst_port="61506"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,010,0 0 0 0 0 0 0 0 0 1 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="62.252.139.60" dst_ip="131.163.59.81" dst_port="445"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,503,0 0 0 1 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="131.163.28.31" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="131.163.37.200"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,504,0 0 0 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="131.163.101.200" src_port="80"/>
            <filter dst_ip="131.163.101.200" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="144.38.4.14" dst_port="80"/>
            <filter src_ip="144.38.4.14" dst_port="8080"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,504,0 0 0 0 0 0 0 0 0 1 0 0,point_to_point">
        <slice>
            <filter src_ip="131.163.239.189" dst_ip="112.162.66.177" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,503,0 0 0 1 0 0 0 0 0 1 1 0,ntscACK">
        <slice>
            <filter src_ip="131.163.237.234" dst_port="80"/>
            <filter src_ip="131.163.237.234" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,504,0 0 0 1 0 0 0 0 0 1 1 0,ntscACK">
        <slice>
            <filter src_ip="169.203.11.205" dst_ip="222.149.131.151"/>
            <filter src_ip="169.203.11.205" dst_port="443"/>
            <filter src_ip="169.203.11.205" dst_port="80"/>
            <filter dst_ip="222.149.131.151" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.646240,1.337150,504,1 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="169.112.252.124" dst_port="993"/>
            <filter src_ip="169.112.252.124" dst_port="443"/>
            <filter dst_ip="112.142.154.126" dst_port="993"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.646240,1.337150,504,1 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="169.112.94.77" dst_port="443"/>
            <filter dst_ip="123.218.136.218" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="172.16.18.202"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.684987,1.404190,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="205.162.158.244" src_port="53"/>
        </slice>
        <from usec="0" sec="1422853203"/>
        <to usec="0" sec="1422853567"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="142.36.160.83"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,heavy_hitter">
        <slice>
            <filter dst_ip="153.217.68.56"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="153.0.83.37"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="131.163.173.240" dst_port="5938"/>
            <filter src_ip="131.163.173.240" dst_ip="139.155.132.52" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="205.162.56.49" dst_ip="158.157.63.36"/>
            <filter src_ip="205.162.56.49" dst_port="80"/>
            <filter dst_ip="158.157.63.36" dst_port="80"/>
            <filter src_ip="205.162.56.49" dst_ip="158.17.216.149" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,502,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="159.45.236.122"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,502,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="204.52.237.91" dst_ip="157.129.20.174" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,020,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="148.93.204.121"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,020,0 0 0 0 0 0 0 0 0 1 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="144.38.4.14"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,ptmplaHTTP">
        <slice>
            <filter src_ip="131.163.79.88" dst_ip="193.113.244.169" dst_port="80"/>
            <filter src_ip="131.163.79.88" dst_ip="193.113.244.97" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="198.239.190.224"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="173.208.78.167" dst_port="53"/>
            <filter src_ip="173.208.78.167" dst_port="80"/>
            <filter src_ip="173.208.78.167" dst_ip="86.189.78.142" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="131.163.239.148" dst_port="80"/>
            <filter src_ip="131.163.239.148" src_port="57620" dst_port="27019"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="199.51.18.35"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,010,0 0 0 0 0 0 0 0 0 1 0 0,ptpDoSSYN">
        <slice>
            <filter dst_ip="205.66.225.130"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.162.47.24" dst_port="64644"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,053,0 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="50.252.149.95" dst_port="3306"/>
            <filter src_ip="79.161.170.83" dst_ip="189.121.31.43" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="205.162.57.92" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,502,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="157.129.20.174" dst_ip="204.52.237.91" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,502,0 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="2.19.232.140" dst_ip="204.52.226.69" dst_port="22"/>
            <filter src_ip="88.38.214.35" dst_ip="204.52.226.20" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="195.72.255.142" dst_port="161"/>
            <filter src_ip="195.72.255.142" dst_ip="204.52.234.155" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,503,0 0 0 1 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="209.135.85.244" dst_ip="204.52.232.51" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.718046,1.279010,503,1 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="130.116.158.192" dst_ip="204.52.230.47" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,503,0 0 0 1 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="204.52.225.100" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,504,0 0 0 1 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="178.104.34.90" dst_ip="222.189.171.0" src_port="65137" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="222.189.178.15"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.718046,1.279010,504,1 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="131.163.129.110" dst_ip="222.189.176.245" src_port="59906" dst_port="443"/>
            <filter src_ip="131.163.129.110" dst_ip="222.189.176.245" src_port="59905" dst_port="443"/>
            <filter src_ip="131.163.129.110" dst_ip="222.189.176.245" src_port="59904" dst_port="443"/>
            <filter src_ip="131.163.129.110" dst_ip="222.189.176.245" src_port="59903" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.718046,1.279010,504,1 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="169.112.46.160" dst_ip="222.189.186.115" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="223.59.154.108"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,999,0 0 0 1 0 0 0 0 0 1 1 0,ntscUDP">
        <slice>
            <filter src_ip="131.163.7.84" dst_port="53"/>
            <filter src_ip="204.52.224.230" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="218.12.169.210"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,point_to_point">
        <slice>
            <filter dst_ip="218.190.77.96"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="210.151.157.149"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,502,0 0 0 1 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="204.52.231.109" dst_ip="209.106.43.217" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,empty">
        <slice>
            <filter src_ip="205.170.105.71" dst_ip="202.250.119.66"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,020,0 0 0 1 0 0 0 0 0 1 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="209.236.97.3"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,999,0 0 0 1 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="169.112.213.159" dst_ip="208.36.91.148" src_port="3389"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,999,0 0 0 1 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="169.112.230.37" dst_ip="22.245.53.82" src_port="4500" dst_port="4500"/>
            <filter src_ip="169.112.230.37" dst_ip="22.245.53.82" src_port="4500" dst_port="1095"/>
            <filter src_ip="169.112.230.37" dst_ip="215.4.165.70" src_port="4500" dst_port="4500"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,502,0 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter dst_ip="212.249.176.247" src_port="22"/>
            <filter src_ip="169.99.31.91" dst_ip="2.19.232.203" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.718046,1.279010,504,1 0 0 0 0 0 0 0 0 1 1 0,ntscACK">
        <slice>
            <filter src_ip="173.208.139.184" dst_port="443"/>
            <filter src_ip="173.208.139.184" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="119.95.171.221"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="119.93.74.72"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,504,0 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="173.208.246.23" dst_port="80"/>
            <filter src_ip="173.208.246.23" dst_port="443"/>
            <filter src_ip="173.208.11.35" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="125.50.214.211"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,503,0 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="178.104.149.36" dst_ip="55.54.70.59"/>
            <filter src_ip="178.104.149.36" dst_port="80"/>
            <filter src_ip="178.104.223.83" dst_port="80"/>
            <filter dst_ip="55.54.70.59" dst_port="80"/>
            <filter dst_ip="123.218.137.120" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="76.88.20.34"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="79.149.41.172"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="65.73.120.206"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="68.111.18.80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="83.247.87.226"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.749772,1.304150,503,1 0 0 1 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="205.162.50.154" dst_ip="79.148.35.190" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,504,0 0 0 1 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="86.128.121.56" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,503,0 0 0 1 0 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="173.208.103.60" dst_port="80"/>
            <filter src_ip="173.208.32.126" dst_ip="86.174.120.78" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,ntscACK">
        <slice>
            <filter src_ip="169.112.230.100" dst_port="80"/>
            <filter src_ip="169.112.230.100" dst_ip="55.75.139.198" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,503,0 0 0 1 0 0 0 0 0 1 1 0,malphfl">
        <slice>
            <filter src_ip="173.208.78.22" dst_ip="86.217.75.48" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,504,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="86.207.104.244"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.749772,1.304150,504,1 0 0 1 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="205.162.56.246" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.749772,1.304150,503,1 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="205.162.48.15" dst_port="80"/>
            <filter dst_ip="86.200.194.98" dst_port="80"/>
            <filter src_ip="131.163.91.211" dst_ip="86.200.194.98" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="178.104.223.38" dst_port="80"/>
            <filter src_ip="178.104.223.43" dst_ip="88.214.74.48" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.646240,1.337150,503,1 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="131.163.89.200" dst_ip="89.73.168.42" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,ntscACK">
        <slice>
            <filter src_ip="131.163.38.155" src_port="80"/>
            <filter src_ip="169.203.73.92" src_port="80"/>
            <filter src_ip="169.203.73.82"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,502,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="92.245.101.11"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="92.216.243.207"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.244.180.235" dst_ip="95.98.44.71" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.560336,1.304030,503,0 0 0 1 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="169.105.116.158" dst_ip="52.151.242.74" dst_port="80"/>
            <filter src_ip="169.105.116.163" dst_ip="52.151.242.74" dst_port="80"/>
            <filter src_ip="178.104.228.206" dst_ip="52.151.242.74" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="52.151.242.38"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="55.151.91.84"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="62.14.223.185"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="62.30.176.165"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="59.120.63.6"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,malphfl">
        <slice>
            <filter src_ip="131.163.91.135" dst_ip="218.237.250.169" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="47.130.240.40"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="46.7.106.23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="100.187.102.125"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="42.13.157.10"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,502,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="42.214.154.46"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="204.52.238.144" dst_ip="39.180.15.253"/>
            <filter src_ip="204.52.238.144" src_port="80"/>
            <filter src_ip="204.52.238.144"/>
            <filter src_ip="204.52.238.144"/>
            <filter dst_ip="39.180.15.253" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="38.194.230.196"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="37.99.110.252"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="37.30.134.50" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,503,0 0 0 1 0 0 0 0 0 1 1 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.112.95.255" dst_ip="98.202.223.53" dst_port="80"/>
            <filter src_ip="169.112.95.255" dst_ip="191.56.246.15" dst_port="80"/>
            <filter src_ip="169.112.95.255" dst_ip="83.76.199.47" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="173.208.136.19" dst_ip="7.215.77.21" src_port="1900" dst_port="9987"/>
            <filter src_ip="173.208.136.19" dst_ip="130.71.94.160" src_port="1900" dst_port="80"/>
            <filter src_ip="173.208.136.19" dst_ip="78.13.219.115" src_port="6144" dst_port="50284"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="4.175.84.158"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,heavy_hitter">
        <slice>
            <filter src_ip="2.33.40.143" dst_ip="169.112.150.3" src_port="62960" dst_port="13030"/>
            <filter src_ip="2.33.40.143" dst_ip="169.112.150.3" src_port="2792" dst_port="13030"/>
            <filter src_ip="2.33.40.143" dst_ip="169.112.150.3" src_port="2674" dst_port="13030"/>
            <filter src_ip="2.33.40.143" dst_ip="169.112.150.3" src_port="2517" dst_port="13030"/>
            <filter src_ip="2.33.40.143" dst_ip="169.112.150.3" src_port="2310" dst_port="13030"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="8.200.224.28" dst_ip="131.163.239.125" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="13.243.172.140" dst_ip="169.112.254.20" src_port="80" dst_port="1900"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="28.237.97.130" dst_ip="131.163.238.225" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="22.243.38.118" dst_ip="189.121.71.37" src_port="5461" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,010,0 0 0 1 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="22.150.82.62" dst_ip="189.121.102.238" dst_port="8080"/>
            <filter src_ip="22.150.82.62" dst_ip="189.121.102.136" dst_port="1081"/>
            <filter src_ip="22.150.82.62" dst_ip="189.121.28.205" dst_port="8080"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="19.69.31.12" dst_ip="131.163.211.109" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="172.193.101.232" src_port="12822"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,999,0 0 0 1 0 0 0 0 0 1 1 0,ntscUDP">
        <slice>
            <filter src_ip="173.208.53.49" src_port="53"/>
            <filter src_ip="173.208.53.49" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411636,1.337030,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="173.208.237.129" dst_ip="193.14.61.110" src_port="60206" dst_port="1935"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="169.105.85.130" dst_ip="222.189.170.203" src_port="50473" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,999,0 0 0 1 0 0 0 0 0 1 1 0,ntscUDP">
        <slice>
            <filter src_ip="169.244.176.3" src_port="53"/>
            <filter src_ip="169.244.176.3" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="112.143.109.193" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,ntscUDP">
        <slice>
            <filter src_ip="169.112.253.17" src_port="6881"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,ntscACK">
        <slice>
            <filter src_ip="169.112.252.12" dst_port="80"/>
            <filter src_ip="169.112.252.12" dst_ip="51.192.1.129" src_port="36730"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,ntscUDP">
        <slice>
            <filter src_ip="169.112.1.97" src_port="15585"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="169.112.221.187" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,010,0 0 0 0 0 0 0 0 0 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="191.56.121.246" src_port="80" dst_port="1234"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="178.104.97.57" dst_ip="30.189.200.58"/>
            <filter src_ip="178.104.97.57" src_port="11361"/>
            <filter dst_ip="30.189.200.58" src_port="11361"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,ptmplaHTTP">
        <slice>
            <filter src_ip="178.104.223.39" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,ntscACK">
        <slice>
            <filter src_ip="178.104.223.121" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,ntscACK">
        <slice>
            <filter src_ip="178.104.223.95" dst_port="80"/>
            <filter src_ip="178.104.223.95" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,504,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="131.163.38.152" dst_ip="92.179.214.206" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,ptmplaHTTP">
        <slice>
            <filter src_ip="131.163.88.30" dst_ip="22.162.133.64" dst_port="80"/>
            <filter src_ip="131.163.88.30" dst_ip="22.162.133.67" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,malphfl">
        <slice>
            <filter src_ip="131.163.175.204" dst_ip="49.126.85.165" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="131.163.139.183" dst_ip="61.108.200.232" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.718046,1.279010,999,1 0 0 0 0 0 0 0 0 1 1 0,ntscUDP">
        <slice>
            <filter src_ip="131.163.7.120" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="131.163.37.43" dst_ip="155.144.199.149" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.133.29.155" dst_ip="173.208.19.243" src_port="80" dst_port="50124"/>
            <filter src_ip="133.133.29.155" dst_ip="205.162.56.191" src_port="80" dst_port="57464"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="112.167.67.194" dst_ip="189.121.226.119" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="112.131.39.148" dst_ip="189.121.224.159" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="158.157.156.206" dst_ip="205.162.56.238" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,502,0 0 0 1 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="159.45.236.122" dst_ip="205.162.47.142" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,ntscUDP">
        <slice>
            <filter src_ip="148.93.204.112" src_port="59456" dst_port="53413"/>
            <filter src_ip="148.93.204.112" src_port="37798" dst_port="53413"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,ntscUDP">
        <slice>
            <filter src_ip="148.93.204.127" src_port="39214" dst_port="53413"/>
            <filter src_ip="148.93.204.127" src_port="37877" dst_port="53413"/>
            <filter src_ip="148.93.204.127" src_port="52435" dst_port="53413"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,010,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="148.93.204.108" dst_port="443"/>
            <filter src_ip="148.93.204.108" src_port="53717" dst_port="53413"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,ntscUDP">
        <slice>
            <filter src_ip="148.93.204.86" src_port="42080" dst_port="53413"/>
            <filter src_ip="148.93.204.86" src_port="60600" dst_port="53413"/>
            <filter src_ip="148.93.204.86" src_port="34035" dst_port="53413"/>
            <filter src_ip="148.93.204.86" src_port="50450" dst_port="53413"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,ntscUDP">
        <slice>
            <filter src_ip="148.93.204.72" src_port="58535" dst_port="53413"/>
            <filter src_ip="148.93.204.72" src_port="47686" dst_port="53413"/>
            <filter src_ip="148.93.204.72" src_port="33138" dst_port="53413"/>
            <filter src_ip="148.93.204.72" src_port="53130" dst_port="53413"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,503,0 0 0 1 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="148.208.188.102" dst_ip="205.162.158.195" src_port="80" dst_port="53949"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,mptplaHTTP">
        <slice>
            <filter src_ip="58.92.58.254" dst_ip="189.121.134.102" src_port="80"/>
            <filter src_ip="149.239.64.212" dst_ip="189.121.134.102" src_port="80"/>
            <filter src_ip="149.239.66.20" dst_ip="189.121.134.102" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="199.4.135.53" dst_ip="189.121.90.48" src_port="36429" dst_port="25"/>
            <filter src_ip="199.4.135.53" dst_ip="189.121.90.48" src_port="36243" dst_port="25"/>
            <filter src_ip="199.4.135.53" dst_ip="173.208.248.237" src_port="57578" dst_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="199.23.119.144" dst_ip="205.162.56.144" src_port="80" dst_port="53655"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,020,0 0 0 0 0 0 0 0 0 1 1 0,hostout">
        <slice>
            <filter src_ip="205.162.43.107"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.718046,1.279010,503,1 0 0 0 0 0 0 0 0 1 1 0,ntscACK">
        <slice>
            <filter src_ip="205.162.56.77" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,020,0 0 0 0 0 0 0 0 0 1 1 0,icmp_error">
        <slice>
            <filter src_ip="204.135.77.9"/>
            <filter src_ip="189.125.44.219" dst_ip="205.162.51.164" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="204.43.136.198" dst_ip="189.121.102.136" src_port="80" dst_port="64846"/>
            <filter src_ip="204.43.136.198" dst_ip="189.121.102.136" src_port="80" dst_port="61905"/>
            <filter src_ip="204.43.136.198" dst_ip="189.121.102.136" src_port="80" dst_port="59523"/>
            <filter src_ip="204.43.136.198" dst_ip="189.121.102.136" src_port="80" dst_port="57301"/>
            <filter src_ip="204.43.136.198" dst_ip="189.121.102.136" src_port="1433" dst_port="50132"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,010,0 0 0 0 0 0 0 0 0 1 1 0,ptpDoSSYN">
        <slice>
            <filter src_ip="204.52.235.209" dst_ip="198.237.168.147" dst_port="6667"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="204.52.230.47" dst_ip="130.116.158.192" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,502,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="204.52.228.43" dst_ip="2.19.232.212" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,ntscACK">
        <slice>
            <filter src_ip="204.52.250.244" src_port="25"/>
            <filter src_ip="204.52.250.244" dst_port="113"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="203.198.194.112" dst_ip="169.112.254.20" src_port="53" dst_port="1900"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="222.154.95.229" dst_ip="169.203.110.210" src_port="80" dst_port="33157"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="189.121.33.190" dst_port="14745"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="211.80.25.5" dst_ip="169.112.254.20" src_port="80" dst_port="1900"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="208.36.91.148" dst_ip="169.112.213.159" dst_port="3389"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,502,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="212.249.188.2" dst_ip="205.162.155.145" dst_port="22"/>
            <filter src_ip="212.249.188.2" dst_ip="205.170.86.196" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,010,0 0 0 1 0 0 0 0 0 1 1 0,sntscSYNt">
        <slice>
            <filter src_ip="50.252.149.69" dst_port="3306"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="119.93.92.255" dst_ip="131.163.175.66" src_port="443" dst_port="54206"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="189.121.227.45" dst_port="6344"/>
            <filter src_ip="76.251.81.63" dst_ip="189.121.227.45" src_port="5938"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="119.114.249.13" src_port="80"/>
            <filter dst_ip="205.162.50.154" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="86.200.29.141" dst_ip="189.121.226.18" src_port="443" dst_port="49603"/>
            <filter src_ip="86.200.29.141" dst_ip="189.121.226.18" src_port="443" dst_port="49600"/>
            <filter src_ip="86.200.29.141" dst_ip="189.121.226.18" src_port="443" dst_port="49597"/>
            <filter src_ip="86.200.29.141" dst_ip="189.121.226.18" src_port="443" dst_port="49594"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="88.20.251.208" dst_ip="169.112.96.146"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="89.73.168.42" dst_ip="131.163.89.200" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,010,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="94.235.215.41" src_port="22" dst_port="3072"/>
            <filter src_ip="94.235.215.41" src_port="22" dst_port="1024"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="95.98.44.78" dst_ip="169.244.180.248" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="53.217.49.221" dst_ip="131.163.28.58" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="55.234.30.232" dst_ip="189.121.224.87" src_port="443" dst_port="26997"/>
            <filter src_ip="55.234.30.232" dst_ip="189.121.224.87" src_port="443" dst_port="26996"/>
            <filter src_ip="55.234.30.232" dst_ip="189.121.224.87" src_port="443" dst_port="26995"/>
            <filter src_ip="55.234.30.232" dst_ip="189.121.39.238" src_port="443" dst_port="50210"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="88.20.251.208" dst_ip="169.112.96.146"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="51.204.0.12" dst_ip="173.208.234.11" src_port="80" dst_port="60914"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYNt">
        <slice>
            <filter src_ip="50.252.149.75" dst_port="3306"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="205.29.66.236" dst_ip="205.162.56.178" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="61.239.154.28" dst_ip="169.112.254.20" src_port="80" dst_port="1900"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,011,0 0 0 0 0 0 0 0 0 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="57.19.127.28" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="58.92.52.194" dst_ip="131.163.238.104" src_port="80" dst_port="61744"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYNt">
        <slice>
            <filter src_ip="45.201.212.216"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,504,0 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="100.176.29.177" dst_ip="173.208.217.133"/>
            <filter src_ip="100.176.29.177" src_port="443"/>
            <filter dst_ip="173.208.217.133" src_port="443"/>
            <filter src_ip="61.200.142.241" dst_ip="173.208.217.133" src_port="80"/>
            <filter src_ip="100.189.93.101" dst_ip="173.208.217.133" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="100.130.121.90" dst_ip="131.163.238.225" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="37.39.57.23" dst_ip="189.121.134.38" src_port="80" dst_port="56162"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYNt">
        <slice>
            <filter src_ip="35.163.14.173" dst_port="102"/>
            <filter src_ip="35.163.14.173" dst_port="2049"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="35.235.161.138" dst_ip="131.163.139.69" src_port="8342" dst_port="57464"/>
            <filter src_ip="35.235.161.138" dst_ip="131.163.139.186" src_port="8342" dst_port="59821"/>
            <filter src_ip="13.166.160.187" dst_ip="131.163.139.69" src_port="80" dst_port="57751"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="34.1.175.150" dst_ip="189.121.134.25" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="34.1.179.0" dst_ip="173.208.150.108" src_port="8777" dst_port="50195"/>
            <filter src_ip="34.1.179.0" dst_ip="173.208.150.108" src_port="8777" dst_port="50194"/>
            <filter src_ip="34.1.179.0" dst_ip="173.208.150.108" src_port="1935" dst_port="50268"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,ptpposcaUDP">
        <slice>
            <filter src_ip="205.67.59.63" dst_ip="10.0.0.1" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.718046,1.279010,504,1 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="173.208.252.94" dst_ip="10.147.237.247" src_port="49275" dst_port="443"/>
            <filter src_ip="173.208.252.94" dst_ip="10.147.237.247" src_port="49274" dst_port="443"/>
            <filter src_ip="173.208.252.94" dst_ip="10.147.237.247" src_port="49273" dst_port="443"/>
            <filter src_ip="173.208.252.94" dst_ip="10.147.237.247" src_port="49272" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="204.52.228.128" dst_ip="12.202.133.209" src_port="51413" dst_port="60582"/>
            <filter src_ip="204.52.228.128" dst_ip="12.202.133.209" src_port="51413" dst_port="6881"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,heavy_hitter">
        <slice>
            <filter src_ip="204.52.234.175" dst_ip="31.143.192.151" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="204.52.235.214" dst_ip="21.187.239.152" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,point_to_point">
        <slice>
            <filter src_ip="131.163.175.77" dst_ip="22.243.1.75" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter src_ip="58.161.24.183" dst_ip="173.208.136.19"/>
            <filter src_ip="58.161.24.183" dst_port="6144"/>
            <filter src_ip="30.189.200.174" dst_ip="173.208.136.19" dst_port="6144"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="173.208.171.236" dst_port="6881"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="173.208.17.3" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="195.154.91.80" src_port="80"/>
            <filter src_ip="195.154.91.80" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYNt">
        <slice>
            <filter src_ip="50.252.149.80" dst_port="3306"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.812479,1.244470,503,1 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="119.110.205.147" src_port="80"/>
            <filter src_ip="119.110.205.147" src_port="443"/>
            <filter dst_ip="169.112.151.7" src_port="80"/>
            <filter dst_ip="169.112.151.7" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter src_ip="193.175.140.112" dst_ip="169.112.238.39" dst_port="110"/>
            <filter src_ip="24.252.95.147" dst_ip="169.112.238.39" dst_port="995"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="169.112.238.38" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,999,0 0 0 1 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="169.112.239.47" dst_port="993"/>
            <filter dst_ip="169.112.239.47" dst_port="143"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="19.231.157.194" src_port="39806"/>
            <filter src_ip="19.231.157.194" dst_ip="169.112.202.129" src_port="5555"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="169.112.162.234" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,mptplaHTTP">
        <slice>
            <filter dst_ip="160.156.62.79" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="189.58.32.71" src_port="53"/>
            <filter dst_ip="189.58.32.71" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="189.121.36.59" src_port="80"/>
            <filter dst_ip="189.121.36.59" dst_port="58278"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,010,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="189.121.224.253" dst_port="9307"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,mptplaHTTP">
        <slice>
            <filter src_ip="49.46.243.134" dst_ip="189.121.226.55" src_port="80"/>
            <filter src_ip="164.129.34.40" dst_ip="189.121.226.55" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="189.121.101.212" dst_port="22027"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,010,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="10.146.8.171" src_port="2710"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,054,0 0 0 0 0 0 0 0 0 1 1 0,heavy_hitter">
        <slice>
            <filter src_ip="112.143.178.217" dst_ip="131.163.239.189" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,010,0 0 0 1 0 0 0 0 0 1 1 0,ntscSYNt">
        <slice>
            <filter src_ip="55.109.68.1"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,053,0 0 0 0 0 0 0 0 0 1 1 0,point_to_point">
        <slice>
            <filter src_ip="218.190.77.96" dst_ip="131.163.133.211" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,mptplaHTTP">
        <slice>
            <filter src_ip="201.145.59.43" dst_ip="131.163.147.100" src_port="80" dst_port="65453"/>
            <filter src_ip="86.225.156.217" dst_ip="131.163.147.100" src_port="443" dst_port="65419"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,504,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="131.163.28.31" dst_ip="135.174.44.96" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,901,0 0 0 0 0 0 0 0 0 1 1 0,malphfl">
        <slice>
            <filter src_ip="173.208.25.85" dst_ip="149.239.64.232" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="169.112.179.219" dst_ip="198.153.116.124" src_port="57394" dst_port="80"/>
            <filter src_ip="169.112.179.219" dst_ip="198.153.116.124" src_port="57341" dst_port="80"/>
            <filter src_ip="169.112.179.219" dst_ip="198.153.116.124" src_port="57137" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="173.208.207.52" dst_ip="199.51.17.224" src_port="50422" dst_port="1935"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,503,0 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="205.162.48.208" dst_port="80"/>
            <filter dst_ip="205.171.216.197" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="204.52.237.137" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,502,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="86.63.65.63" dst_ip="204.52.239.225" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="209.190.132.65" dst_ip="204.52.230.146" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.718046,1.279010,503,1 0 0 0 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="204.52.230.139" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,502,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="2.19.232.212" dst_ip="204.52.228.43" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.52.226.29" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.52.226.60" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,502,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="28.20.209.75" dst_ip="204.52.224.187" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,502,0 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="2.19.232.222" dst_port="22"/>
            <filter src_ip="88.38.214.35" dst_ip="204.52.250.165"/>
            <filter src_ip="88.38.214.35" dst_ip="204.52.248.196"/>
            <filter src_ip="88.38.214.35" dst_port="22"/>
            <filter dst_ip="204.52.250.165" dst_port="22"/>
            <filter dst_ip="204.52.248.196" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,ptmplaHTTP">
        <slice>
            <filter src_ip="131.163.147.100" dst_ip="201.145.59.43" src_port="65453" dst_port="80"/>
            <filter src_ip="131.163.147.100" dst_ip="86.225.156.217" src_port="65419" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="204.52.228.128" dst_ip="218.129.82.78" src_port="51413" dst_port="51413"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="173.208.158.146" dst_ip="210.92.72.159" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,501,0 0 0 0 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter src_ip="169.203.76.191" dst_ip="212.208.59.90"/>
            <filter src_ip="169.203.76.190" dst_ip="212.208.59.90" src_port="21"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,020,0 0 0 0 0 0 0 0 0 1 1 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="212.249.133.96"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,502,0 0 0 0 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter src_ip="204.52.230.190" dst_ip="212.249.191.81" src_port="22"/>
            <filter src_ip="204.52.226.168" dst_ip="212.249.191.81" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="205.162.47.24" dst_ip="125.0.237.114" src_port="64644" dst_port="63127"/>
            <filter src_ip="205.162.47.24" dst_ip="125.0.237.114" src_port="64376" dst_port="63127"/>
            <filter src_ip="205.162.47.24" dst_ip="125.0.237.114" src_port="64071" dst_port="63127"/>
            <filter src_ip="205.162.47.24" dst_ip="125.0.237.114" src_port="64006" dst_port="63127"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="205.162.47.24" dst_ip="125.213.240.236" src_port="64644" dst_port="61404"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="204.52.238.155" dst_ip="126.165.25.146" src_port="8080" dst_port="51680"/>
            <filter src_ip="204.52.238.155" dst_ip="126.165.25.146" src_port="6881" dst_port="51681"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,504,0 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="178.104.86.221" dst_port="443"/>
            <filter src_ip="169.112.95.217" dst_port="443"/>
            <filter dst_ip="123.218.136.218" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter src_ip="204.52.238.159" dst_ip="76.197.35.234" dst_port="5667"/>
            <filter src_ip="204.52.238.170" dst_ip="76.197.35.234" dst_port="5667"/>
            <filter src_ip="204.52.238.160" dst_ip="76.197.35.234" dst_port="5667"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,504,0 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="131.163.237.138" src_port="54374"/>
            <filter src_ip="131.163.237.138" dst_port="80"/>
            <filter src_ip="131.163.218.75" dst_port="80"/>
            <filter src_ip="131.163.218.75" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,502,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="169.112.43.180" dst_ip="86.174.153.100" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,503,0 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="173.208.96.237" dst_ip="199.4.134.24"/>
            <filter src_ip="173.208.96.237" dst_port="80"/>
            <filter src_ip="173.208.96.237" dst_port="443"/>
            <filter dst_ip="199.4.134.24" dst_port="80"/>
            <filter dst_ip="199.4.134.24" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,502,0 0 0 0 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter src_ip="169.244.184.32" dst_ip="86.63.65.63" src_port="22"/>
            <filter src_ip="204.52.239.225" dst_ip="86.63.65.63" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="169.244.180.248" dst_ip="95.98.44.79" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="169.244.180.248" dst_ip="95.98.44.78" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="169.244.180.248" dst_ip="95.98.44.77" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="169.203.44.14" dst_ip="55.117.104.192" src_port="53847" dst_port="1935"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="204.52.224.211" dst_ip="49.126.85.173" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641826,1.244340,503,0 0 0 1 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="205.162.155.228" dst_ip="223.70.81.89" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="204.52.228.128" dst_ip="57.68.220.207" src_port="51413" dst_port="51413"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="204.52.228.128" dst_ip="57.0.237.232" src_port="51413" dst_port="51413"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="131.163.1.11" dst_ip="100.187.102.96" src_port="54012" dst_port="80"/>
            <filter src_ip="131.163.1.11" dst_ip="100.187.102.96" src_port="53997" dst_port="80"/>
            <filter src_ip="131.163.1.11" dst_ip="100.187.102.96" src_port="53944" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="204.52.228.128" dst_ip="45.228.203.6" src_port="51413" dst_port="5141"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="204.52.228.128" dst_ip="44.181.164.255" src_port="51413" dst_port="61976"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="169.105.28.81" dst_ip="4.226.172.212" src_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.517115,1.278890,999,0 0 0 0 0 0 0 0 0 1 1 0,point_to_point">
        <slice>
            <filter src_ip="204.52.228.128" dst_ip="4.54.195.143" src_port="51413" dst_port="57960"/>
            <filter src_ip="204.52.228.128" dst_ip="4.54.195.143" src_port="51413" dst_port="56313"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
