<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="148.182.162.125" dst_ip="77.86.237.38" src_port="62427" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359242"/>
        <to usec="0" sec="1425359247"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="145.164.97.99"/>
        </slice>
        <from usec="0" sec="1425359087"/>
        <to usec="0" sec="1425359092"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="145.164.107.144" dst_ip="161.189.140.97" src_port="63317" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425358849"/>
        <to usec="0" sec="1425359590"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="148.11.154.254"/>
        </slice>
        <from usec="0" sec="1425358933"/>
        <to usec="0" sec="1425359232"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="145.164.232.42" dst_ip="110.255.25.209" src_port="49311" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359063"/>
        <to usec="0" sec="1425359068"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="145.164.26.236" dst_ip="13.188.232.30" src_port="54190" dst_port="25675" proto="udp"/>
        </slice>
        <from usec="0" sec="1425359229"/>
        <to usec="0" sec="1425359398"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="96.168.24.63" dst_ip="148.165.97.56" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359080"/>
        <to usec="0" sec="1425359403"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="145.164.28.35"/>
        </slice>
        <from usec="0" sec="1425359226"/>
        <to usec="0" sec="1425359231"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="193.253.47.53" dst_ip="145.164.235.138" src_port="80" dst_port="56184" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359323"/>
        <to usec="0" sec="1425359556"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="21.216.23.30" dst_ip="148.165.71.119" src_port="80" dst_port="57829" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359432"/>
        <to usec="0" sec="1425359434"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.189.82.123" dst_ip="129.76.90.135" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359087"/>
        <to usec="0" sec="1425359089"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="145.164.236.9"/>
        </slice>
        <from usec="0" sec="1425359571"/>
        <to usec="0" sec="1425359574"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="187.102.242.255" dst_ip="167.164.117.203" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425358922"/>
        <to usec="0" sec="1425359219"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.91.2.207" dst_ip="187.102.228.31" src_port="443" dst_port="60292" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359178"/>
        <to usec="0" sec="1425359180"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="148.165.135.241"/>
        </slice>
        <from usec="0" sec="1425358910"/>
        <to usec="0" sec="1425359093"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="148.182.133.73" dst_ip="210.142.173.160" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359206"/>
        <to usec="0" sec="1425359211"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="104.5.193.178" dst_ip="187.102.147.13" src_port="443" dst_port="61633" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425358901"/>
        <to usec="0" sec="1425359043"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.189.147.50" dst_ip="223.168.16.112" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359242"/>
        <to usec="0" sec="1425359247"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="7.8.41.249" dst_ip="187.102.237.170" src_port="80" dst_port="58745" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425358971"/>
        <to usec="0" sec="1425358973"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="187.102.147.189" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359069"/>
        <to usec="0" sec="1425359584"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="148.182.96.216" dst_ip="210.142.161.246" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425358801"/>
        <to usec="0" sec="1425359301"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="206.168.131.203" dst_ip="145.164.181.194" src_port="443" dst_port="60661" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359572"/>
        <to usec="0" sec="1425359573"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="217.150.115.159"/>
        </slice>
        <from usec="0" sec="1425359094"/>
        <to usec="0" sec="1425359097"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="145.164.214.245"/>
        </slice>
        <from usec="0" sec="1425359090"/>
        <to usec="0" sec="1425359582"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="187.102.78.6"/>
        </slice>
        <from usec="0" sec="1425359242"/>
        <to usec="0" sec="1425359254"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="148.11.173.81"/>
        </slice>
        <from usec="0" sec="1425359613"/>
        <to usec="0" sec="1425359616"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="143.197.104.239" dst_ip="77.86.239.212" src_port="4817" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425358824"/>
        <to usec="0" sec="1425358833"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="203.189.147.3" dst_port="80"/>
        </slice>
        <from usec="0" sec="1425358854"/>
        <to usec="0" sec="1425359330"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.88.179.223" dst_ip="69.112.240.211" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359075"/>
        <to usec="0" sec="1425359078"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="38.226.106.202" dst_ip="148.185.56.226" src_port="52961" dst_port="11889" proto="udp"/>
        </slice>
        <from usec="0" sec="1425358805"/>
        <to usec="0" sec="1425358837"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="187.102.210.152" dst_ip="64.67.161.126" src_port="57200" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425358831"/>
        <to usec="0" sec="1425358833"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="187.102.255.40" dst_ip="210.142.173.29" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359048"/>
        <to usec="0" sec="1425359050"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="82.182.176.62" dst_ip="148.185.56.226" src_port="5298" dst_port="11889" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359570"/>
        <to usec="0" sec="1425359584"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="223.234.234.193" dst_ip="202.88.178.253" src_port="80" dst_port="59462" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425358828"/>
        <to usec="0" sec="1425358830"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="57.80.48.53" dst_ip="187.102.243.202" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425358806"/>
        <to usec="0" sec="1425358823"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="42.247.11.29"/>
        </slice>
        <from usec="0" sec="1425359096"/>
        <to usec="0" sec="1425359098"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="148.165.79.195" dst_ip="23.164.236.107" src_port="62714" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425358805"/>
        <to usec="0" sec="1425359399"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="99.91.247.120" dst_ip="145.164.114.54" src_port="80" dst_port="64380" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425358820"/>
        <to usec="0" sec="1425358821"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="16.73.156.118" dst_ip="129.76.2.77" src_port="80" dst_port="50672" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425358828"/>
        <to usec="0" sec="1425358830"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="148.165.177.106" dst_ip="77.86.238.82" src_port="64199" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425358905"/>
        <to usec="0" sec="1425358906"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="145.164.160.96" dst_ip="104.7.92.108" src_port="64323" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359199"/>
        <to usec="0" sec="1425359357"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="110.255.183.128" dst_ip="187.102.187.169" src_port="80" dst_port="55521" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359072"/>
        <to usec="0" sec="1425359086"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="46.97.247.19" dst_ip="129.76.35.51" src_port="80" dst_port="49328" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359189"/>
        <to usec="0" sec="1425359190"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="148.11.143.153" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425358917"/>
        <to usec="0" sec="1425359330"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="99.95.65.111" dst_ip="148.165.213.255" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359188"/>
        <to usec="0" sec="1425359189"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="199.3.67.72" dst_ip="187.102.242.225" src_port="80" dst_port="58084" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425358895"/>
        <to usec="0" sec="1425358896"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="187.102.226.116" dst_ip="184.179.1.64" src_port="49338" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359331"/>
        <to usec="0" sec="1425359333"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="187.102.147.25"/>
        </slice>
        <from usec="0" sec="1425358912"/>
        <to usec="0" sec="1425359471"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="7.8.41.35" dst_ip="187.102.144.54" src_port="443" dst_port="60944" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359295"/>
        <to usec="0" sec="1425359297"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="69.151.49.175" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359237"/>
        <to usec="0" sec="1425359338"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="145.164.43.189" dst_ip="110.248.143.239" src_port="32604" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359179"/>
        <to usec="0" sec="1425359356"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="221.140.51.122" dst_ip="187.102.5.200" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359247"/>
        <to usec="0" sec="1425359249"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="148.182.148.23" dst_ip="77.86.224.229" src_port="50610" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359202"/>
        <to usec="0" sec="1425359203"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="145.164.206.165" dst_ip="110.255.31.116" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425358845"/>
        <to usec="0" sec="1425359616"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="32.104.84.222" dst_ip="129.76.140.3" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359483"/>
        <to usec="0" sec="1425359484"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="187.102.146.154" dst_ip="189.192.210.232" src_port="64905" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359295"/>
        <to usec="0" sec="1425359300"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="145.164.186.53" dst_ip="104.99.103.9" src_port="57081" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425358801"/>
        <to usec="0" sec="1425359403"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="143.197.172.253" dst_ip="210.142.188.99" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359185"/>
        <to usec="0" sec="1425359485"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="49.100.14.65" dst_ip="145.164.225.38" src_port="80" dst_port="49546" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425358895"/>
        <to usec="0" sec="1425358896"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="145.164.21.174" dst_ip="69.176.203.186" src_port="22346" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359226"/>
        <to usec="0" sec="1425359473"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="148.165.97.56" dst_ip="15.147.9.146" src_port="80" dst_port="44884" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359065"/>
        <to usec="0" sec="1425359066"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="193.253.45.92" dst_ip="148.165.78.190" src_port="80" dst_port="50031" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359044"/>
        <to usec="0" sec="1425359057"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="14.117.38.6" dst_ip="145.164.239.239" src_port="80" dst_port="50957" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359321"/>
        <to usec="0" sec="1425359329"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="187.102.187.169"/>
        </slice>
        <from usec="0" sec="1425359038"/>
        <to usec="0" sec="1425359574"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.189.7.214" dst_ip="160.75.223.54" src_port="54232" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359609"/>
        <to usec="0" sec="1425359616"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="144.117.232.11" dst_ip="179.252.148.72" src_port="5470" dst_port="26841" proto="udp"/>
        </slice>
        <from usec="0" sec="1425359192"/>
        <to usec="0" sec="1425359400"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="187.102.253.180" dst_port="443"/>
            <filter dst_ip="59.185.25.68" dst_port="443"/>
        </slice>
        <from usec="0" sec="1425359206"/>
        <to usec="0" sec="1425359573"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="77.86.237.38"/>
        </slice>
        <from usec="0" sec="1425359052"/>
        <to usec="0" sec="1425359064"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="130.52.237.254" dst_ip="130.52.237.254"/>
        </slice>
        <from usec="0" sec="1425358860"/>
        <to usec="0" sec="1425359637"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="77.86.224.226"/>
        </slice>
        <from usec="0" sec="1425359318"/>
        <to usec="0" sec="1425359330"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="148.165.213.253"/>
        </slice>
        <from usec="0" sec="1425359097"/>
        <to usec="0" sec="1425359204"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="148.165.213.255"/>
        </slice>
        <from usec="0" sec="1425359296"/>
        <to usec="0" sec="1425359307"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="34.107.141.166" dst_ip="203.189.0.255" dst_port="80"/>
            <filter src_ip="42.28.79.133" dst_ip="203.189.0.255" dst_port="80"/>
        </slice>
        <from usec="0" sec="1425359088"/>
        <to usec="0" sec="1425359227"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="99.91.92.112" dst_ip="129.76.202.243" src_port="49529" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425358909"/>
        <to usec="0" sec="1425358920"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="148.165.97.56" dst_ip="148.165.97.56" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425358917"/>
        <to usec="0" sec="1425359575"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="7.147.18.224"/>
        </slice>
        <from usec="0" sec="1425359196"/>
        <to usec="0" sec="1425359198"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,502,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="37.185.255.79" dst_ip="202.88.162.68" dst_port="22" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425358846"/>
        <to usec="0" sec="1425359330"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="148.11.237.241"/>
        </slice>
        <from usec="0" sec="1425359069"/>
        <to usec="0" sec="1425359582"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="187.102.77.185" dst_ip="86.116.176.230" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359216"/>
        <to usec="0" sec="1425359256"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="143.197.104.218"/>
        </slice>
        <from usec="0" sec="1425358909"/>
        <to usec="0" sec="1425358911"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="38.130.79.53"/>
        </slice>
        <from usec="0" sec="1425359064"/>
        <to usec="0" sec="1425359663"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="220.79.202.137" dst_port="22" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359070"/>
        <to usec="0" sec="1425359395"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="187.102.76.54"/>
        </slice>
        <from usec="0" sec="1425359305"/>
        <to usec="0" sec="1425359307"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.88.189.228"/>
        </slice>
        <from usec="0" sec="1425358852"/>
        <to usec="0" sec="1425359582"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="42.85.188.78"/>
        </slice>
        <from usec="0" sec="1425359063"/>
        <to usec="0" sec="1425359065"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="192.121.240.81"/>
        </slice>
        <from usec="0" sec="1425359226"/>
        <to usec="0" sec="1425359228"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="191.101.53.180"/>
        </slice>
        <from usec="0" sec="1425359088"/>
        <to usec="0" sec="1425359090"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.88.177.120"/>
        </slice>
        <from usec="0" sec="1425359660"/>
        <to usec="0" sec="1425359662"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="144.117.200.33"/>
        </slice>
        <from usec="0" sec="1425359616"/>
        <to usec="0" sec="1425359618"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="49.93.196.149"/>
        </slice>
        <from usec="0" sec="1425359631"/>
        <to usec="0" sec="1425359633"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="162.131.246.170" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359567"/>
        <to usec="0" sec="1425359592"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.158.65.238" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359025"/>
        <to usec="0" sec="1425359036"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="162.37.248.236"/>
        </slice>
        <from usec="0" sec="1425359385"/>
        <to usec="0" sec="1425359402"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="162.132.84.177" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425359610"/>
        <to usec="0" sec="1425359624"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="126.77.208.145" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425358802"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="145.164.36.169"/>
        </slice>
        <from usec="0" sec="1425359478"/>
        <to usec="0" sec="1425359480"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="77.86.238.85"/>
        </slice>
        <from usec="0" sec="1425359038"/>
        <to usec="0" sec="1425359210"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="99.89.70.139"/>
        </slice>
        <from usec="0" sec="1425358865"/>
        <to usec="0" sec="1425358867"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="173.51.142.169"/>
        </slice>
        <from usec="0" sec="1425359388"/>
        <to usec="0" sec="1425359390"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="19.240.10.191"/>
        </slice>
        <from usec="0" sec="1425359298"/>
        <to usec="0" sec="1425359300"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="148.165.103.122"/>
        </slice>
        <from usec="0" sec="1425359610"/>
        <to usec="0" sec="1425359613"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="37.108.243.39"/>
        </slice>
        <from usec="0" sec="1425358923"/>
        <to usec="0" sec="1425358925"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="42.219.235.181"/>
        </slice>
        <from usec="0" sec="1425359306"/>
        <to usec="0" sec="1425359308"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.88.187.123"/>
        </slice>
        <from usec="0" sec="1425359580"/>
        <to usec="0" sec="1425359582"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,502,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="148.165.194.248"/>
        </slice>
        <from usec="0" sec="1425358907"/>
        <to usec="0" sec="1425358910"/>
    </anomaly>
    <anomaly type="notice" value="0.459368,1.127030,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="165.137.50.237"/>
        </slice>
        <from usec="0" sec="1425359480"/>
        <to usec="0" sec="1425359482"/>
    </anomaly>
    <anomaly type="notice" value="0.794450,1.207160,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="130.52.237.254" dst_ip="130.52.237.254"/>
        </slice>
        <from usec="0" sec="1425358860"/>
        <to usec="0" sec="1425359637"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="69.219.81.60"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425358908"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="39.74.218.92"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425358997"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="8.186.126.208"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425358902"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="46.97.208.100"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425358908"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.179.175.57"/>
        </slice>
        <from usec="0" sec="1425358804"/>
        <to usec="0" sec="1425358908"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="144.117.195.173"/>
        </slice>
        <from usec="0" sec="1425358826"/>
        <to usec="0" sec="1425358908"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.167.6.217"/>
        </slice>
        <from usec="0" sec="1425358835"/>
        <to usec="0" sec="1425358851"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="161.189.140.235"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425358998"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="128.207.26.164"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425358981"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="214.191.136.243"/>
        </slice>
        <from usec="0" sec="1425358859"/>
        <to usec="0" sec="1425358871"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="143.197.253.26"/>
        </slice>
        <from usec="0" sec="1425358881"/>
        <to usec="0" sec="1425358996"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="27.251.199.186"/>
        </slice>
        <from usec="0" sec="1425358801"/>
        <to usec="0" sec="1425359088"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="182.133.44.144"/>
        </slice>
        <from usec="0" sec="1425358802"/>
        <to usec="0" sec="1425359087"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="187.102.120.172"/>
        </slice>
        <from usec="0" sec="1425358803"/>
        <to usec="0" sec="1425359081"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="187.102.76.225"/>
        </slice>
        <from usec="0" sec="1425358805"/>
        <to usec="0" sec="1425359088"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="148.11.149.83"/>
        </slice>
        <from usec="0" sec="1425358830"/>
        <to usec="0" sec="1425359077"/>
    </anomaly>
    <anomaly type="notice" value="0.500167,1.118680,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.88.189.154" dst_ip="14.45.142.208" src_port="80"/>
            <filter src_ip="202.88.189.154" dst_ip="14.45.142.248" src_port="80"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425359473"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="187.102.120.214"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425359177"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,020,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="92.114.191.151"/>
        </slice>
        <from usec="0" sec="1425358802"/>
        <to usec="0" sec="1425359177"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="167.33.120.104"/>
        </slice>
        <from usec="0" sec="1425358804"/>
        <to usec="0" sec="1425359178"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="203.179.235.26"/>
        </slice>
        <from usec="0" sec="1425358810"/>
        <to usec="0" sec="1425359042"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="197.99.218.206"/>
        </slice>
        <from usec="0" sec="1425358814"/>
        <to usec="0" sec="1425359170"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="187.102.76.81"/>
        </slice>
        <from usec="0" sec="1425358822"/>
        <to usec="0" sec="1425359171"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="148.182.136.80"/>
        </slice>
        <from usec="0" sec="1425358843"/>
        <to usec="0" sec="1425359163"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="148.11.131.175"/>
        </slice>
        <from usec="0" sec="1425358844"/>
        <to usec="0" sec="1425359174"/>
    </anomaly>
    <anomaly type="notice" value="0.500167,1.118680,503,1 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="14.45.142.248" dst_ip="202.88.189.154" src_port="60310" dst_port="80"/>
            <filter src_ip="14.45.142.248" dst_ip="202.88.189.154" src_port="52581" dst_port="80"/>
            <filter src_ip="14.45.142.248" dst_ip="202.88.189.154" src_port="36062" dst_port="80"/>
            <filter src_ip="15.206.227.108" dst_ip="202.88.189.154" src_port="56448" dst_port="80"/>
            <filter src_ip="14.45.142.208" dst_ip="202.88.189.154" src_port="37125" dst_port="80"/>
        </slice>
        <from usec="0" sec="1425358899"/>
        <to usec="0" sec="1425359101"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="101.81.26.215"/>
        </slice>
        <from usec="0" sec="1425359042"/>
        <to usec="0" sec="1425359073"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="145.164.53.188"/>
        </slice>
        <from usec="0" sec="1425359049"/>
        <to usec="0" sec="1425359077"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="203.178.142.102" dst_port="53"/>
            <filter src_ip="203.178.142.102" dst_port="80"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425359268"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="207.198.19.74"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425359257"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="145.164.55.36" dst_ip="38.96.19.137" src_port="22"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425359448"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.189.2.55"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425359242"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="148.182.26.144"/>
        </slice>
        <from usec="0" sec="1425358801"/>
        <to usec="0" sec="1425359262"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="145.164.114.54"/>
        </slice>
        <from usec="0" sec="1425358802"/>
        <to usec="0" sec="1425359240"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="148.182.247.97"/>
        </slice>
        <from usec="0" sec="1425358809"/>
        <to usec="0" sec="1425359244"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="148.182.101.39"/>
        </slice>
        <from usec="0" sec="1425358835"/>
        <to usec="0" sec="1425359268"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="145.164.114.36"/>
        </slice>
        <from usec="0" sec="1425359020"/>
        <to usec="0" sec="1425359202"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="216.3.52.21"/>
        </slice>
        <from usec="0" sec="1425359052"/>
        <to usec="0" sec="1425359125"/>
    </anomaly>
    <anomaly type="notice" value="0.500167,1.118680,504,1 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="176.91.2.207" dst_port="443"/>
            <filter dst_ip="176.91.2.207" dst_port="80"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425359633"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="69.151.159.59"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425359355"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="148.182.216.143"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425359308"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="101.255.84.98"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425359357"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="148.185.56.43"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425359358"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="99.57.91.178"/>
        </slice>
        <from usec="0" sec="1425358804"/>
        <to usec="0" sec="1425359355"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="148.11.230.125"/>
        </slice>
        <from usec="0" sec="1425358807"/>
        <to usec="0" sec="1425359339"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="220.5.220.225"/>
        </slice>
        <from usec="0" sec="1425358807"/>
        <to usec="0" sec="1425359311"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="187.102.76.108"/>
        </slice>
        <from usec="0" sec="1425358809"/>
        <to usec="0" sec="1425359355"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="187.102.227.80"/>
        </slice>
        <from usec="0" sec="1425358831"/>
        <to usec="0" sec="1425359354"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="187.102.227.151"/>
        </slice>
        <from usec="0" sec="1425358832"/>
        <to usec="0" sec="1425359348"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="148.11.129.107"/>
        </slice>
        <from usec="0" sec="1425358838"/>
        <to usec="0" sec="1425359358"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.189.137.143"/>
        </slice>
        <from usec="0" sec="1425358838"/>
        <to usec="0" sec="1425359357"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="191.101.53.239"/>
        </slice>
        <from usec="0" sec="1425359048"/>
        <to usec="0" sec="1425359356"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="145.164.131.80"/>
        </slice>
        <from usec="0" sec="1425359078"/>
        <to usec="0" sec="1425359191"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="86.116.176.230"/>
        </slice>
        <from usec="0" sec="1425359155"/>
        <to usec="0" sec="1425359272"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="107.137.210.43"/>
        </slice>
        <from usec="0" sec="1425359195"/>
        <to usec="0" sec="1425359324"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="197.59.99.199"/>
        </slice>
        <from usec="0" sec="1425359225"/>
        <to usec="0" sec="1425359332"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="40.215.3.179"/>
        </slice>
        <from usec="0" sec="1425359297"/>
        <to usec="0" sec="1425359339"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="117.74.76.170"/>
        </slice>
        <from usec="0" sec="1425359308"/>
        <to usec="0" sec="1425359334"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="24.165.40.234"/>
        </slice>
        <from usec="0" sec="1425359334"/>
        <to usec="0" sec="1425359340"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.179.165.78"/>
        </slice>
        <from usec="0" sec="1425359341"/>
        <to usec="0" sec="1425359349"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="166.198.188.173"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425359444"/>
    </anomaly>
    <anomaly type="notice" value="0.500167,1.118680,999,1 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="148.165.213.251" dst_port="993"/>
            <filter dst_ip="148.165.213.251" dst_port="143"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425359471"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="37.108.80.93"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425359445"/>
    </anomaly>
    <anomaly type="notice" value="0.500167,1.118680,504,1 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="42.154.212.247" dst_ip="202.88.179.225" dst_port="443"/>
            <filter src_ip="34.58.68.75" dst_ip="202.88.179.225" dst_port="443"/>
        </slice>
        <from usec="0" sec="1425358801"/>
        <to usec="0" sec="1425359448"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="148.51.254.226" dst_port="53"/>
        </slice>
        <from usec="0" sec="1425358801"/>
        <to usec="0" sec="1425359447"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="148.165.216.169"/>
        </slice>
        <from usec="0" sec="1425358802"/>
        <to usec="0" sec="1425359448"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="187.102.167.19"/>
        </slice>
        <from usec="0" sec="1425358802"/>
        <to usec="0" sec="1425359443"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="95.136.90.43" dst_ip="148.165.212.97" src_port="53"/>
        </slice>
        <from usec="0" sec="1425358808"/>
        <to usec="0" sec="1425359440"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="160.92.74.132"/>
        </slice>
        <from usec="0" sec="1425358812"/>
        <to usec="0" sec="1425359409"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="69.129.232.208"/>
        </slice>
        <from usec="0" sec="1425358819"/>
        <to usec="0" sec="1425359381"/>
    </anomaly>
    <anomaly type="notice" value="0.500167,1.118680,504,1 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="77.86.237.90" dst_port="443"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425359633"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="148.182.79.89"/>
        </slice>
        <from usec="0" sec="1425358956"/>
        <to usec="0" sec="1425359432"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="143.197.33.159"/>
        </slice>
        <from usec="0" sec="1425359037"/>
        <to usec="0" sec="1425359312"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="3.194.33.225"/>
        </slice>
        <from usec="0" sec="1425359111"/>
        <to usec="0" sec="1425359448"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="187.102.187.63"/>
        </slice>
        <from usec="0" sec="1425359243"/>
        <to usec="0" sec="1425359409"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="187.102.76.193"/>
        </slice>
        <from usec="0" sec="1425359305"/>
        <to usec="0" sec="1425359330"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="145.164.58.173" dst_ip="197.66.109.246" dst_port="8000"/>
            <filter src_ip="145.164.58.173" dst_ip="200.25.210.172" src_port="22"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425359538"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="145.164.77.164"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425359538"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="96.180.109.37"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425359538"/>
    </anomaly>
    <anomaly type="notice" value="0.500167,1.118680,999,1 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="118.56.132.101" dst_ip="129.76.90.135" src_port="9590" dst_port="12598"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425359573"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="199.3.45.62"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425359537"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="187.102.147.196"/>
        </slice>
        <from usec="0" sec="1425358801"/>
        <to usec="0" sec="1425359538"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="60.88.156.239"/>
        </slice>
        <from usec="0" sec="1425358801"/>
        <to usec="0" sec="1425359538"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="44.139.7.188"/>
        </slice>
        <from usec="0" sec="1425358802"/>
        <to usec="0" sec="1425359536"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,010,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="126.65.68.188" dst_ip="129.76.209.70" src_port="443"/>
        </slice>
        <from usec="0" sec="1425358804"/>
        <to usec="0" sec="1425359536"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="145.164.189.104"/>
        </slice>
        <from usec="0" sec="1425358805"/>
        <to usec="0" sec="1425359538"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="4.169.30.200"/>
        </slice>
        <from usec="0" sec="1425358805"/>
        <to usec="0" sec="1425359537"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="96.180.109.47"/>
        </slice>
        <from usec="0" sec="1425358808"/>
        <to usec="0" sec="1425359538"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="144.117.100.201"/>
        </slice>
        <from usec="0" sec="1425358813"/>
        <to usec="0" sec="1425359535"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="37.19.72.120"/>
        </slice>
        <from usec="0" sec="1425359018"/>
        <to usec="0" sec="1425359505"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="123.117.48.154"/>
        </slice>
        <from usec="0" sec="1425359042"/>
        <to usec="0" sec="1425359538"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="34.182.1.51"/>
        </slice>
        <from usec="0" sec="1425359120"/>
        <to usec="0" sec="1425359538"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="64.118.161.104"/>
        </slice>
        <from usec="0" sec="1425359130"/>
        <to usec="0" sec="1425359491"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="61.8.172.110"/>
        </slice>
        <from usec="0" sec="1425359175"/>
        <to usec="0" sec="1425359491"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="203.189.139.218"/>
        </slice>
        <from usec="0" sec="1425359288"/>
        <to usec="0" sec="1425359412"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="215.141.82.112"/>
        </slice>
        <from usec="0" sec="1425359391"/>
        <to usec="0" sec="1425359430"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="143.197.18.19"/>
        </slice>
        <from usec="0" sec="1425359406"/>
        <to usec="0" sec="1425359532"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="148.165.151.251"/>
        </slice>
        <from usec="0" sec="1425359445"/>
        <to usec="0" sec="1425359483"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="69.151.144.135"/>
        </slice>
        <from usec="0" sec="1425359476"/>
        <to usec="0" sec="1425359509"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="49.100.15.96"/>
        </slice>
        <from usec="0" sec="1425359481"/>
        <to usec="0" sec="1425359515"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="173.246.1.116"/>
        </slice>
        <from usec="0" sec="1425359508"/>
        <to usec="0" sec="1425359538"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="69.179.25.220"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425359628"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="143.197.253.89"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425359540"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="148.165.215.209"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425359628"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="117.231.192.207"/>
        </slice>
        <from usec="0" sec="1425358800"/>
        <to usec="0" sec="1425359597"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.189.135.23"/>
        </slice>
        <from usec="0" sec="1425358802"/>
        <to usec="0" sec="1425359622"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="148.165.237.93"/>
        </slice>
        <from usec="0" sec="1425358803"/>
        <to usec="0" sec="1425359627"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="187.102.78.213"/>
        </slice>
        <from usec="0" sec="1425358803"/>
        <to usec="0" sec="1425359628"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="145.164.124.144"/>
        </slice>
        <from usec="0" sec="1425358803"/>
        <to usec="0" sec="1425359617"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="151.224.38.143"/>
        </slice>
        <from usec="0" sec="1425358804"/>
        <to usec="0" sec="1425359628"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="187.102.144.2"/>
        </slice>
        <from usec="0" sec="1425358805"/>
        <to usec="0" sec="1425359613"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="69.151.49.146"/>
        </slice>
        <from usec="0" sec="1425358806"/>
        <to usec="0" sec="1425359621"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="206.66.105.13"/>
        </slice>
        <from usec="0" sec="1425358811"/>
        <to usec="0" sec="1425359626"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="148.11.236.47"/>
        </slice>
        <from usec="0" sec="1425358815"/>
        <to usec="0" sec="1425359622"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="145.164.47.7"/>
        </slice>
        <from usec="0" sec="1425358822"/>
        <to usec="0" sec="1425359616"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="64.118.225.47"/>
        </slice>
        <from usec="0" sec="1425358830"/>
        <to usec="0" sec="1425359616"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="63.62.194.235"/>
        </slice>
        <from usec="0" sec="1425358872"/>
        <to usec="0" sec="1425359600"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="110.241.121.192"/>
        </slice>
        <from usec="0" sec="1425358969"/>
        <to usec="0" sec="1425359628"/>
    </anomaly>
    <anomaly type="notice" value="0.500167,1.118680,504,1 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.179.147.108" dst_port="53"/>
            <filter src_ip="203.179.147.108" dst_ip="187.102.5.193" dst_port="443"/>
        </slice>
        <from usec="0" sec="1425358982"/>
        <to usec="0" sec="1425359520"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="123.116.58.113"/>
        </slice>
        <from usec="0" sec="1425359070"/>
        <to usec="0" sec="1425359627"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="148.182.66.186"/>
        </slice>
        <from usec="0" sec="1425359201"/>
        <to usec="0" sec="1425359463"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="56.80.231.123"/>
        </slice>
        <from usec="0" sec="1425359290"/>
        <to usec="0" sec="1425359507"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="40.87.246.89"/>
        </slice>
        <from usec="0" sec="1425359359"/>
        <to usec="0" sec="1425359582"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="69.154.18.227"/>
        </slice>
        <from usec="0" sec="1425359384"/>
        <to usec="0" sec="1425359470"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="16.71.229.36"/>
        </slice>
        <from usec="0" sec="1425359412"/>
        <to usec="0" sec="1425359482"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="73.143.247.106"/>
        </slice>
        <from usec="0" sec="1425359501"/>
        <to usec="0" sec="1425359565"/>
    </anomaly>
    <anomaly type="notice" value="0.475496,1.146390,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="82.213.90.83"/>
        </slice>
        <from usec="0" sec="1425359587"/>
        <to usec="0" sec="1425359627"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="46.97.255.216"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.701289,1.114120,504,1 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="187.102.138.161" dst_port="443"/>
            <filter src_ip="187.102.138.161" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="187.102.147.46" dst_ip="203.179.124.56" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.701289,1.114120,504,1 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="187.102.147.13" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.701289,1.114120,503,1 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.103.242.149" dst_ip="203.189.5.92" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="203.189.157.15"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="69.179.65.57"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="110.225.166.18"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="100.83.136.95"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="96.168.24.52"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="24.187.230.74"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="33.223.181.246"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="145.164.189.104"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="145.164.223.142"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="148.165.208.25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="148.165.45.190"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.701289,1.114120,999,1 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="192.67.24.126" dst_ip="148.165.212.15" dst_port="25"/>
            <filter src_ip="192.67.24.126" dst_ip="148.165.212.9" dst_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="148.165.151.159"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.165.155.138"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.711958,1.133700,503,0 0 0 1 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="129.76.115.247" src_port="80"/>
            <filter dst_ip="129.76.115.247" dst_port="6204"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="129.76.225.155" src_port="80"/>
            <filter dst_ip="129.76.225.155" src_port="443"/>
            <filter dst_ip="129.76.225.155" dst_port="21148"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="129.76.152.96" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="187.102.79.164"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="187.102.228.6"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.711958,1.133700,503,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="99.91.247.73" src_port="80"/>
            <filter dst_ip="187.102.227.134" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="160.227.185.116"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="161.138.195.184"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.189.139.217"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.711958,1.133700,503,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="69.151.51.233" src_port="443"/>
            <filter dst_ip="203.189.141.27" src_port="443"/>
            <filter dst_ip="203.189.141.27" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.189.7.214" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.728667,1.105670,503,1 0 0 1 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.178.189.251" src_port="53"/>
            <filter dst_ip="203.178.189.251" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="206.241.120.132"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="210.142.161.230"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.711958,1.133700,504,0 0 0 1 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="143.197.188.135" dst_ip="210.142.173.197" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.701289,1.114120,503,1 0 0 0 0 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="203.178.142.102" dst_port="53"/>
            <filter src_ip="203.178.142.102" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="104.27.231.206"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.701289,1.114120,504,1 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="203.189.147.96" dst_ip="110.255.223.78" src_port="52175" dst_port="443"/>
            <filter src_ip="203.189.147.96" dst_ip="110.255.223.78" src_port="52172" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="110.255.179.221"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="11.129.1.96"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="8.225.1.70"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.701289,1.114120,503,1 0 0 0 0 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="202.88.177.120" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="19.82.116.161"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683912,1.141940,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="16.71.4.152"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
