<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.684420,1.285490,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="191.106.252.142"/>
        </slice>
        <from usec="0" sec="1428123907"/>
        <to usec="0" sec="1428123910"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.136.127.172" dst_ip="205.56.218.155" src_port="60789" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428124180"/>
        <to usec="0" sec="1428124182"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="204.32.143.98" dst_ip="145.246.78.16" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428123735"/>
        <to usec="0" sec="1428124451"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="158.203.112.216" dst_ip="1.195.217.27" src_port="39671" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428123757"/>
        <to usec="0" sec="1428123790"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="15.73.46.117" dst_ip="186.135.210.22" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428124245"/>
        <to usec="0" sec="1428124248"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="186.135.243.114" dst_ip="148.140.94.19" src_port="54028" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428124295"/>
        <to usec="0" sec="1428124444"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="191.106.98.163" dst_ip="190.235.142.229" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428124388"/>
        <to usec="0" sec="1428124430"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="60.65.230.207" dst_ip="186.12.151.239" src_port="57256" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428124323"/>
        <to usec="0" sec="1428124325"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="186.135.243.70" dst_ip="148.140.94.19" src_port="65135" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428124364"/>
        <to usec="0" sec="1428124391"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="55.73.6.237" dst_ip="186.135.31.120" src_port="41416" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428124320"/>
        <to usec="0" sec="1428124331"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="159.177.161.197" dst_ip="186.135.213.53" src_port="8089" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428124264"/>
        <to usec="0" sec="1428124347"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="162.79.249.157" dst_ip="12.34.65.233" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428124321"/>
        <to usec="0" sec="1428124323"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="158.203.114.39" dst_ip="12.42.243.230" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428124382"/>
        <to usec="0" sec="1428124393"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="1.194.128.181" dst_ip="175.217.35.119" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428124297"/>
        <to usec="0" sec="1428124299"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="162.79.93.75" dst_ip="223.54.105.118" src_port="56191" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428124235"/>
        <to usec="0" sec="1428124436"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="213.122.18.106" dst_ip="158.203.114.81" src_port="443" dst_port="36031" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428124382"/>
        <to usec="0" sec="1428124384"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="204.32.143.33" dst_ip="135.226.97.17" src_port="80" dst_port="53955" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428124247"/>
        <to usec="0" sec="1428124342"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="162.79.52.1" dst_ip="223.54.105.159" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428123619"/>
        <to usec="0" sec="1428124342"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="8.71.72.154" dst_ip="175.217.115.249" src_port="16384" dst_port="57326" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428124409"/>
        <to usec="0" sec="1428124411"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="143.149.143.244" dst_ip="191.106.1.255" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428124090"/>
        <to usec="0" sec="1428124403"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="162.79.249.209" dst_ip="56.116.186.151" src_port="23208" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428124382"/>
        <to usec="0" sec="1428124393"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="135.14.52.98" dst_ip="191.106.235.116" src_port="80" dst_port="36435" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428123794"/>
        <to usec="0" sec="1428123816"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="158.203.114.72" dst_ip="1.194.130.193" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428123879"/>
        <to usec="0" sec="1428123892"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="158.203.2.152"/>
        </slice>
        <from usec="0" sec="1428123737"/>
        <to usec="0" sec="1428123970"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="158.203.54.67"/>
        </slice>
        <from usec="0" sec="1428123810"/>
        <to usec="0" sec="1428123812"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="122.7.174.243" dst_ip="175.217.116.88" src_port="1935" dst_port="41038" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428123638"/>
        <to usec="0" sec="1428123641"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="204.46.61.107" dst_ip="175.221.7.64" src_port="80" dst_port="33604" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428123739"/>
        <to usec="0" sec="1428123741"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="204.46.136.79" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428124367"/>
        <to usec="0" sec="1428124393"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="205.56.218.155" dst_ip="136.136.127.172" src_port="80" dst_port="45361" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428123739"/>
        <to usec="0" sec="1428124448"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="158.203.112.120"/>
        </slice>
        <from usec="0" sec="1428123665"/>
        <to usec="0" sec="1428123954"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="60.191.231.155"/>
        </slice>
        <from usec="0" sec="1428123778"/>
        <to usec="0" sec="1428123785"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="191.106.235.116"/>
        </slice>
        <from usec="0" sec="1428123736"/>
        <to usec="0" sec="1428123873"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="162.79.129.172"/>
        </slice>
        <from usec="0" sec="1428124392"/>
        <to usec="0" sec="1428124394"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="191.106.245.194" dst_ip="5.108.207.246" src_port="60396" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428123604"/>
        <to usec="0" sec="1428123871"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="204.46.61.215" dst_ip="204.46.61.215" dst_port="123" proto="udp"/>
        </slice>
        <from usec="0" sec="1428123769"/>
        <to usec="0" sec="1428123963"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="204.46.61.212" dst_ip="204.46.61.212" dst_port="123" proto="udp"/>
        </slice>
        <from usec="0" sec="1428123769"/>
        <to usec="0" sec="1428123963"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="204.46.58.93" dst_ip="204.46.58.93" dst_port="123" proto="udp"/>
        </slice>
        <from usec="0" sec="1428123619"/>
        <to usec="0" sec="1428124036"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="204.46.58.94" dst_ip="204.46.58.94" dst_port="123" proto="udp"/>
        </slice>
        <from usec="0" sec="1428123619"/>
        <to usec="0" sec="1428124036"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="204.46.58.95" dst_ip="204.46.58.95" dst_port="123" proto="udp"/>
        </slice>
        <from usec="0" sec="1428123619"/>
        <to usec="0" sec="1428124036"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="205.56.210.32" dst_ip="205.56.210.32" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428123638"/>
        <to usec="0" sec="1428124248"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="186.135.31.75"/>
        </slice>
        <from usec="0" sec="1428123786"/>
        <to usec="0" sec="1428123917"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="204.46.62.144" dst_ip="204.46.62.144" dst_port="123" proto="udp"/>
        </slice>
        <from usec="0" sec="1428123735"/>
        <to usec="0" sec="1428124248"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="191.106.113.201" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428123638"/>
        <to usec="0" sec="1428124166"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="204.46.62.254" dst_ip="204.46.62.254" dst_port="123" proto="udp"/>
        </slice>
        <from usec="0" sec="1428123737"/>
        <to usec="0" sec="1428124394"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="205.56.213.97" dst_ip="205.56.213.97" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428123780"/>
        <to usec="0" sec="1428124106"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="205.56.213.98" dst_port="80"/>
        </slice>
        <from usec="0" sec="1428123780"/>
        <to usec="0" sec="1428124117"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="186.135.210.22" dst_ip="186.135.210.22" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428123737"/>
        <to usec="0" sec="1428124384"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="18.144.227.143" dst_ip="191.106.219.140" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428124247"/>
        <to usec="0" sec="1428124334"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="158.203.112.242"/>
        </slice>
        <from usec="0" sec="1428124241"/>
        <to usec="0" sec="1428124243"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.175.202.94"/>
        </slice>
        <from usec="0" sec="1428123776"/>
        <to usec="0" sec="1428123779"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="215.212.169.82"/>
        </slice>
        <from usec="0" sec="1428123793"/>
        <to usec="0" sec="1428123796"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="158.203.232.254"/>
        </slice>
        <from usec="0" sec="1428124035"/>
        <to usec="0" sec="1428124038"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="186.158.55.253" dst_ip="124.216.89.255" dst_port="80"/>
            <filter src_ip="190.161.1.40" dst_ip="124.216.89.255" dst_port="80"/>
        </slice>
        <from usec="0" sec="1428123782"/>
        <to usec="0" sec="1428123796"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,020,1 0 0 0 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter src_ip="205.56.211.49" dst_ip="216.204.114.115" proto="icmp"/>
        </slice>
        <from usec="0" sec="1428123665"/>
        <to usec="0" sec="1428124324"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,999,1 0 0 0 0 0 0 0 0 0 0 0,ipv46tun">
        <slice>
            <filter src_ip="173.167.238.211" dst_ip="205.56.218.201"/>
        </slice>
        <from usec="0" sec="1428124234"/>
        <to usec="0" sec="1428124451"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="23.165.106.66" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428124179"/>
        <to usec="0" sec="1428124192"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="134.228.86.227"/>
        </slice>
        <from usec="0" sec="1428124378"/>
        <to usec="0" sec="1428124401"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="214.77.175.169" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1428124234"/>
        <to usec="0" sec="1428124452"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="143.48.71.76" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428123790"/>
        <to usec="0" sec="1428123816"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="71.245.164.241" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1428123687"/>
        <to usec="0" sec="1428123695"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="75.253.229.109"/>
        </slice>
        <from usec="0" sec="1428123663"/>
        <to usec="0" sec="1428123666"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="197.217.62.221" proto="icmp"/>
        </slice>
        <from usec="0" sec="1428123710"/>
        <to usec="0" sec="1428123712"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,011,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="68.9.13.88"/>
        </slice>
        <from usec="0" sec="1428124243"/>
        <to usec="0" sec="1428124246"/>
    </anomaly>
    <anomaly type="notice" value="0.684420,1.285490,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="135.226.76.27"/>
        </slice>
        <from usec="0" sec="1428124383"/>
        <to usec="0" sec="1428124386"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="158.203.154.182"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123708"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="205.56.220.44"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123708"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="175.217.96.162"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123707"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="158.203.112.130"/>
        </slice>
        <from usec="0" sec="1428123602"/>
        <to usec="0" sec="1428123703"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="175.217.193.196"/>
        </slice>
        <from usec="0" sec="1428123622"/>
        <to usec="0" sec="1428123708"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="95.12.234.119"/>
        </slice>
        <from usec="0" sec="1428123626"/>
        <to usec="0" sec="1428124316"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="103.74.107.84"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123797"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="31.3.187.187"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123798"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="158.203.234.207"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123978"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="56.116.189.118"/>
        </slice>
        <from usec="0" sec="1428123601"/>
        <to usec="0" sec="1428123797"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,010,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="204.46.159.51"/>
        </slice>
        <from usec="0" sec="1428123602"/>
        <to usec="0" sec="1428123797"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="191.106.25.203"/>
        </slice>
        <from usec="0" sec="1428123604"/>
        <to usec="0" sec="1428123798"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="213.122.18.37"/>
        </slice>
        <from usec="0" sec="1428123608"/>
        <to usec="0" sec="1428123637"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="108.170.137.3"/>
        </slice>
        <from usec="0" sec="1428123608"/>
        <to usec="0" sec="1428123777"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="105.233.15.75"/>
        </slice>
        <from usec="0" sec="1428123613"/>
        <to usec="0" sec="1428124060"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="151.14.201.231"/>
        </slice>
        <from usec="0" sec="1428123718"/>
        <to usec="0" sec="1428123729"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="5.109.67.116"/>
        </slice>
        <from usec="0" sec="1428123745"/>
        <to usec="0" sec="1428123811"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter dst_ip="169.85.57.39"/>
        </slice>
        <from usec="0" sec="1428123759"/>
        <to usec="0" sec="1428123763"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="107.55.20.210"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123888"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="186.135.242.245"/>
        </slice>
        <from usec="0" sec="1428123993"/>
        <to usec="0" sec="1428124338"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="1.248.30.253"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123888"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="177.119.245.200"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123881"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="213.241.37.104"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123814"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="204.46.151.127"/>
        </slice>
        <from usec="0" sec="1428123601"/>
        <to usec="0" sec="1428123881"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,502,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="194.98.235.22"/>
        </slice>
        <from usec="0" sec="1428123601"/>
        <to usec="0" sec="1428124423"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="158.203.112.43"/>
        </slice>
        <from usec="0" sec="1428123601"/>
        <to usec="0" sec="1428123973"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="204.46.62.39"/>
        </slice>
        <from usec="0" sec="1428123601"/>
        <to usec="0" sec="1428123888"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="191.106.145.128"/>
        </slice>
        <from usec="0" sec="1428123602"/>
        <to usec="0" sec="1428124068"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="158.203.114.74"/>
        </slice>
        <from usec="0" sec="1428123609"/>
        <to usec="0" sec="1428123888"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="221.185.255.236"/>
        </slice>
        <from usec="0" sec="1428123620"/>
        <to usec="0" sec="1428123822"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="51.185.201.56"/>
        </slice>
        <from usec="0" sec="1428123630"/>
        <to usec="0" sec="1428123888"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="175.217.35.152" src_port="80"/>
        </slice>
        <from usec="0" sec="1428123631"/>
        <to usec="0" sec="1428124068"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="127.183.202.88"/>
        </slice>
        <from usec="0" sec="1428123661"/>
        <to usec="0" sec="1428123861"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="186.153.94.237"/>
        </slice>
        <from usec="0" sec="1428123673"/>
        <to usec="0" sec="1428123748"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="51.177.61.246"/>
        </slice>
        <from usec="0" sec="1428123676"/>
        <to usec="0" sec="1428123864"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="195.126.246.195"/>
        </slice>
        <from usec="0" sec="1428124389"/>
        <to usec="0" sec="1428124428"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="1.217.69.97"/>
        </slice>
        <from usec="0" sec="1428123734"/>
        <to usec="0" sec="1428123762"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="130.159.191.205"/>
        </slice>
        <from usec="0" sec="1428123752"/>
        <to usec="0" sec="1428123882"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="204.46.134.16"/>
        </slice>
        <from usec="0" sec="1428123805"/>
        <to usec="0" sec="1428123888"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="71.36.71.198"/>
        </slice>
        <from usec="0" sec="1428123806"/>
        <to usec="0" sec="1428123856"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="204.33.59.96"/>
        </slice>
        <from usec="0" sec="1428123824"/>
        <to usec="0" sec="1428123866"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="38.144.216.110"/>
        </slice>
        <from usec="0" sec="1428123864"/>
        <to usec="0" sec="1428123888"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="204.213.249.40" dst_ip="158.203.113.213" src_port="80"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123977"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="130.155.214.152"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124428"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="223.29.75.32"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123978"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="158.203.232.137"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123973"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="131.86.69.151"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124158"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="90.75.24.38"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124067"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="31.85.252.199"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123962"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="1.143.231.182"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124067"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="194.213.72.49"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123978"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="191.106.89.175"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123974"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="191.106.135.91"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123961"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,010,0 0 0 1 0 0 0 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="186.135.22.151" dst_port="80"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123977"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="1.143.220.2"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124157"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="152.172.104.240"/>
        </slice>
        <from usec="0" sec="1428123601"/>
        <to usec="0" sec="1428123837"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="90.75.27.236"/>
        </slice>
        <from usec="0" sec="1428123601"/>
        <to usec="0" sec="1428123974"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="131.86.69.137"/>
        </slice>
        <from usec="0" sec="1428123601"/>
        <to usec="0" sec="1428123978"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="1.143.208.45"/>
        </slice>
        <from usec="0" sec="1428123602"/>
        <to usec="0" sec="1428123978"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="148.140.64.63"/>
        </slice>
        <from usec="0" sec="1428123602"/>
        <to usec="0" sec="1428124068"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="186.135.242.192" src_port="80"/>
            <filter dst_ip="186.135.242.192" src_port="443"/>
        </slice>
        <from usec="0" sec="1428123602"/>
        <to usec="0" sec="1428123978"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="22.174.201.55"/>
        </slice>
        <from usec="0" sec="1428123603"/>
        <to usec="0" sec="1428123971"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="214.87.41.14"/>
        </slice>
        <from usec="0" sec="1428123604"/>
        <to usec="0" sec="1428123972"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="159.177.130.62"/>
        </slice>
        <from usec="0" sec="1428123606"/>
        <to usec="0" sec="1428123963"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="204.46.59.189"/>
        </slice>
        <from usec="0" sec="1428123615"/>
        <to usec="0" sec="1428123976"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,020,0 0 0 1 0 0 0 0 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="158.203.205.43"/>
        </slice>
        <from usec="0" sec="1428123621"/>
        <to usec="0" sec="1428123925"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="135.226.97.101"/>
        </slice>
        <from usec="0" sec="1428123629"/>
        <to usec="0" sec="1428124051"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="12.242.143.125"/>
        </slice>
        <from usec="0" sec="1428123637"/>
        <to usec="0" sec="1428124065"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="191.106.6.79"/>
        </slice>
        <from usec="0" sec="1428123664"/>
        <to usec="0" sec="1428123958"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="191.106.230.128"/>
        </slice>
        <from usec="0" sec="1428123667"/>
        <to usec="0" sec="1428123930"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="223.54.106.171"/>
        </slice>
        <from usec="0" sec="1428123748"/>
        <to usec="0" sec="1428123884"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="95.161.166.151"/>
        </slice>
        <from usec="0" sec="1428123775"/>
        <to usec="0" sec="1428123894"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="193.128.25.148"/>
        </slice>
        <from usec="0" sec="1428123788"/>
        <to usec="0" sec="1428123964"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="148.101.63.116"/>
        </slice>
        <from usec="0" sec="1428124118"/>
        <to usec="0" sec="1428124272"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="142.169.151.5"/>
        </slice>
        <from usec="0" sec="1428123879"/>
        <to usec="0" sec="1428123882"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="135.14.52.68"/>
        </slice>
        <from usec="0" sec="1428123931"/>
        <to usec="0" sec="1428123945"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="204.33.203.211"/>
        </slice>
        <from usec="0" sec="1428123963"/>
        <to usec="0" sec="1428123974"/>
    </anomaly>
    <anomaly type="notice" value="0.690713,1.267260,503,1 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="175.217.34.236" src_port="80"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124443"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="69.188.153.29"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124067"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.74.150.187"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124024"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="131.32.66.193"/>
        </slice>
        <from usec="0" sec="1428123601"/>
        <to usec="0" sec="1428123983"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="1.52.37.232"/>
        </slice>
        <from usec="0" sec="1428123601"/>
        <to usec="0" sec="1428123978"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="5.97.240.207"/>
        </slice>
        <from usec="0" sec="1428123601"/>
        <to usec="0" sec="1428124068"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="135.226.97.89"/>
        </slice>
        <from usec="0" sec="1428123601"/>
        <to usec="0" sec="1428124063"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="158.203.112.89"/>
        </slice>
        <from usec="0" sec="1428123602"/>
        <to usec="0" sec="1428124068"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="193.1.109.94" dst_ip="205.56.210.4" dst_port="80"/>
        </slice>
        <from usec="0" sec="1428123602"/>
        <to usec="0" sec="1428124068"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="158.203.96.85"/>
        </slice>
        <from usec="0" sec="1428123602"/>
        <to usec="0" sec="1428123984"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="223.29.74.172"/>
        </slice>
        <from usec="0" sec="1428123604"/>
        <to usec="0" sec="1428124062"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="191.106.145.150"/>
        </slice>
        <from usec="0" sec="1428123607"/>
        <to usec="0" sec="1428124061"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="158.203.95.115"/>
        </slice>
        <from usec="0" sec="1428123607"/>
        <to usec="0" sec="1428123956"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="127.44.58.76"/>
        </slice>
        <from usec="0" sec="1428123608"/>
        <to usec="0" sec="1428124424"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="158.203.114.29"/>
        </slice>
        <from usec="0" sec="1428123613"/>
        <to usec="0" sec="1428124066"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="158.203.205.216"/>
        </slice>
        <from usec="0" sec="1428123619"/>
        <to usec="0" sec="1428124054"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="140.165.234.102"/>
        </slice>
        <from usec="0" sec="1428123650"/>
        <to usec="0" sec="1428124418"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="15.90.167.152"/>
        </slice>
        <from usec="0" sec="1428123750"/>
        <to usec="0" sec="1428123908"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="145.246.138.117"/>
        </slice>
        <from usec="0" sec="1428123913"/>
        <to usec="0" sec="1428123926"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="94.234.242.109"/>
        </slice>
        <from usec="0" sec="1428123920"/>
        <to usec="0" sec="1428124006"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="175.221.203.150"/>
        </slice>
        <from usec="0" sec="1428123923"/>
        <to usec="0" sec="1428123940"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="205.56.221.183"/>
        </slice>
        <from usec="0" sec="1428123986"/>
        <to usec="0" sec="1428124065"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="169.85.56.63"/>
        </slice>
        <from usec="0" sec="1428123991"/>
        <to usec="0" sec="1428123995"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="127.121.6.140"/>
        </slice>
        <from usec="0" sec="1428124057"/>
        <to usec="0" sec="1428124064"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="186.158.204.141" dst_ip="51.204.93.0" dst_port="123"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124150"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="158.203.114.72" src_port="80"/>
            <filter dst_ip="158.203.114.72" src_port="443"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124158"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,020,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="135.198.146.241"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124158"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,012,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="64.143.52.40"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124157"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="90.64.66.183"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124157"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,002,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="158.203.248.134"/>
        </slice>
        <from usec="0" sec="1428123602"/>
        <to usec="0" sec="1428124152"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="211.176.196.88"/>
        </slice>
        <from usec="0" sec="1428123603"/>
        <to usec="0" sec="1428124424"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="1.231.11.23"/>
        </slice>
        <from usec="0" sec="1428123607"/>
        <to usec="0" sec="1428124142"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="15.89.81.41"/>
        </slice>
        <from usec="0" sec="1428123632"/>
        <to usec="0" sec="1428124158"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="28.149.60.212"/>
        </slice>
        <from usec="0" sec="1428123861"/>
        <to usec="0" sec="1428124158"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="130.107.27.219"/>
        </slice>
        <from usec="0" sec="1428123890"/>
        <to usec="0" sec="1428124150"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="77.189.248.27"/>
        </slice>
        <from usec="0" sec="1428123993"/>
        <to usec="0" sec="1428124071"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="149.172.191.89"/>
        </slice>
        <from usec="0" sec="1428123996"/>
        <to usec="0" sec="1428124087"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="18.91.93.21"/>
        </slice>
        <from usec="0" sec="1428124008"/>
        <to usec="0" sec="1428124017"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="191.106.98.201"/>
        </slice>
        <from usec="0" sec="1428124090"/>
        <to usec="0" sec="1428124153"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter dst_ip="126.111.68.65"/>
        </slice>
        <from usec="0" sec="1428124136"/>
        <to usec="0" sec="1428124149"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="5.109.1.154"/>
        </slice>
        <from usec="0" sec="1428123620"/>
        <to usec="0" sec="1428124242"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="204.32.185.173"/>
        </slice>
        <from usec="0" sec="1428124017"/>
        <to usec="0" sec="1428124168"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="204.46.155.60"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124337"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="89.84.249.130"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124428"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="55.137.249.51"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124301"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.56.215.140" src_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124333"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="186.135.30.177" dst_port="443"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124338"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="200.119.74.63" dst_ip="158.203.58.142" src_port="80"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124336"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="222.74.120.9" dst_ip="204.46.61.185" src_port="80"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124338"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="186.135.22.174" src_port="80"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124338"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="191.106.84.224"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124294"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="197.219.227.145"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124337"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="121.2.137.159"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124338"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="1.142.210.76"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124338"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="190.191.239.39"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124427"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="223.7.113.106"/>
        </slice>
        <from usec="0" sec="1428123601"/>
        <to usec="0" sec="1428124331"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="55.65.171.23"/>
        </slice>
        <from usec="0" sec="1428123601"/>
        <to usec="0" sec="1428124338"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.56.210.49" src_port="53"/>
        </slice>
        <from usec="0" sec="1428123601"/>
        <to usec="0" sec="1428124295"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="1.36.144.221"/>
        </slice>
        <from usec="0" sec="1428123606"/>
        <to usec="0" sec="1428124337"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="191.106.235.29"/>
        </slice>
        <from usec="0" sec="1428123607"/>
        <to usec="0" sec="1428124426"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="72.164.13.210"/>
        </slice>
        <from usec="0" sec="1428123607"/>
        <to usec="0" sec="1428124420"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="204.46.135.106"/>
        </slice>
        <from usec="0" sec="1428123607"/>
        <to usec="0" sec="1428124337"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="191.106.243.22"/>
        </slice>
        <from usec="0" sec="1428123607"/>
        <to usec="0" sec="1428124336"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="51.185.213.33"/>
        </slice>
        <from usec="0" sec="1428123608"/>
        <to usec="0" sec="1428124311"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="2.13.176.244"/>
        </slice>
        <from usec="0" sec="1428123608"/>
        <to usec="0" sec="1428124337"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="204.213.248.160"/>
        </slice>
        <from usec="0" sec="1428123618"/>
        <to usec="0" sec="1428124326"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="191.106.230.99"/>
        </slice>
        <from usec="0" sec="1428123619"/>
        <to usec="0" sec="1428124337"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="90.75.21.117"/>
        </slice>
        <from usec="0" sec="1428123622"/>
        <to usec="0" sec="1428124259"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="175.217.228.4" src_port="80"/>
            <filter dst_ip="175.217.228.4" src_port="1610" dst_port="60060"/>
        </slice>
        <from usec="0" sec="1428123622"/>
        <to usec="0" sec="1428124338"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="158.203.52.156" src_port="80"/>
            <filter dst_ip="158.203.52.156" src_port="443"/>
        </slice>
        <from usec="0" sec="1428123651"/>
        <to usec="0" sec="1428124319"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="64.191.101.14"/>
        </slice>
        <from usec="0" sec="1428123652"/>
        <to usec="0" sec="1428124316"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="191.106.134.53"/>
        </slice>
        <from usec="0" sec="1428123703"/>
        <to usec="0" sec="1428124334"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="204.46.133.231"/>
        </slice>
        <from usec="0" sec="1428123852"/>
        <to usec="0" sec="1428124229"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="204.46.135.108"/>
        </slice>
        <from usec="0" sec="1428123913"/>
        <to usec="0" sec="1428124335"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="135.226.97.76"/>
        </slice>
        <from usec="0" sec="1428123919"/>
        <to usec="0" sec="1428124335"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="204.32.130.70"/>
        </slice>
        <from usec="0" sec="1428123978"/>
        <to usec="0" sec="1428124305"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,502,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="143.28.125.63"/>
        </slice>
        <from usec="0" sec="1428124036"/>
        <to usec="0" sec="1428124338"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="69.247.185.118"/>
        </slice>
        <from usec="0" sec="1428124077"/>
        <to usec="0" sec="1428124338"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="40.241.18.104"/>
        </slice>
        <from usec="0" sec="1428124104"/>
        <to usec="0" sec="1428124331"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="122.197.87.12"/>
        </slice>
        <from usec="0" sec="1428124128"/>
        <to usec="0" sec="1428124167"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="55.66.159.224"/>
        </slice>
        <from usec="0" sec="1428124161"/>
        <to usec="0" sec="1428124230"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter dst_ip="119.3.96.206"/>
        </slice>
        <from usec="0" sec="1428124188"/>
        <to usec="0" sec="1428124202"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="186.153.239.199"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124426"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="191.106.113.245"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124428"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="204.213.249.40" dst_ip="175.217.34.207" src_port="80"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124422"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="195.56.38.244"/>
        </slice>
        <from usec="0" sec="1428123602"/>
        <to usec="0" sec="1428124344"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="191.106.245.194"/>
        </slice>
        <from usec="0" sec="1428123602"/>
        <to usec="0" sec="1428124420"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="186.135.30.231" dst_port="80"/>
        </slice>
        <from usec="0" sec="1428123603"/>
        <to usec="0" sec="1428124424"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,020,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="90.75.21.228"/>
        </slice>
        <from usec="0" sec="1428123603"/>
        <to usec="0" sec="1428124427"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="95.105.95.237"/>
        </slice>
        <from usec="0" sec="1428123604"/>
        <to usec="0" sec="1428124422"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="205.56.221.67" dst_port="80"/>
        </slice>
        <from usec="0" sec="1428123605"/>
        <to usec="0" sec="1428124425"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="1.143.188.229"/>
        </slice>
        <from usec="0" sec="1428123605"/>
        <to usec="0" sec="1428124419"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="208.72.102.254" dst_ip="175.217.238.9" src_port="80"/>
        </slice>
        <from usec="0" sec="1428123605"/>
        <to usec="0" sec="1428124421"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="195.76.230.218" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123607"/>
        <to usec="0" sec="1428124415"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="15.89.81.38"/>
        </slice>
        <from usec="0" sec="1428123608"/>
        <to usec="0" sec="1428124428"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.73.32.36"/>
        </slice>
        <from usec="0" sec="1428123609"/>
        <to usec="0" sec="1428124397"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="193.21.245.170"/>
        </slice>
        <from usec="0" sec="1428123610"/>
        <to usec="0" sec="1428124426"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="204.46.151.19"/>
        </slice>
        <from usec="0" sec="1428123627"/>
        <to usec="0" sec="1428124409"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,020,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="198.203.105.94"/>
        </slice>
        <from usec="0" sec="1428123690"/>
        <to usec="0" sec="1428124428"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="119.34.221.246"/>
        </slice>
        <from usec="0" sec="1428123705"/>
        <to usec="0" sec="1428124421"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="30.221.76.155"/>
        </slice>
        <from usec="0" sec="1428123825"/>
        <to usec="0" sec="1428124428"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="204.46.133.83"/>
        </slice>
        <from usec="0" sec="1428123927"/>
        <to usec="0" sec="1428124404"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.46.141.164"/>
        </slice>
        <from usec="0" sec="1428123971"/>
        <to usec="0" sec="1428124428"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="99.217.48.41"/>
        </slice>
        <from usec="0" sec="1428123989"/>
        <to usec="0" sec="1428124323"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="175.217.84.119"/>
        </slice>
        <from usec="0" sec="1428123994"/>
        <to usec="0" sec="1428124253"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="208.16.199.31"/>
        </slice>
        <from usec="0" sec="1428124043"/>
        <to usec="0" sec="1428124419"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="56.116.167.19"/>
        </slice>
        <from usec="0" sec="1428124141"/>
        <to usec="0" sec="1428124311"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="223.9.125.8"/>
        </slice>
        <from usec="0" sec="1428124153"/>
        <to usec="0" sec="1428124353"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="175.152.215.206"/>
        </slice>
        <from usec="0" sec="1428124169"/>
        <to usec="0" sec="1428124394"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="55.65.84.129"/>
        </slice>
        <from usec="0" sec="1428124179"/>
        <to usec="0" sec="1428124394"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="204.7.84.138"/>
        </slice>
        <from usec="0" sec="1428124199"/>
        <to usec="0" sec="1428124254"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="51.142.189.28"/>
        </slice>
        <from usec="0" sec="1428124220"/>
        <to usec="0" sec="1428124413"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="131.86.68.165"/>
        </slice>
        <from usec="0" sec="1428124278"/>
        <to usec="0" sec="1428124296"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="56.116.186.153"/>
        </slice>
        <from usec="0" sec="1428124300"/>
        <to usec="0" sec="1428124405"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="108.234.174.225"/>
        </slice>
        <from usec="0" sec="1428124315"/>
        <to usec="0" sec="1428124344"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="137.40.229.150"/>
        </slice>
        <from usec="0" sec="1428124335"/>
        <to usec="0" sec="1428124366"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter dst_ip="126.138.120.56"/>
        </slice>
        <from usec="0" sec="1428124337"/>
        <to usec="0" sec="1428124350"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="205.56.211.106"/>
        </slice>
        <from usec="0" sec="1428124347"/>
        <to usec="0" sec="1428124397"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="157.235.177.156"/>
        </slice>
        <from usec="0" sec="1428124349"/>
        <to usec="0" sec="1428124407"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="195.98.43.230"/>
        </slice>
        <from usec="0" sec="1428124351"/>
        <to usec="0" sec="1428124355"/>
    </anomaly>
    <anomaly type="notice" value="0.422961,1.270370,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="131.88.210.159"/>
        </slice>
        <from usec="0" sec="1428124365"/>
        <to usec="0" sec="1428124399"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="186.135.31.120" dst_ip="31.169.220.229" src_port="80" dst_port="38311"/>
        </slice>
        <from usec="0" sec="1428123641"/>
        <to usec="0" sec="1428123655"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,020,0 0 0 1 1 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter src_ip="205.56.211.49" dst_ip="169.85.56.189"/>
            <filter src_ip="205.56.211.59" dst_ip="169.85.56.189"/>
        </slice>
        <from usec="0" sec="1428123710"/>
        <to usec="0" sec="1428123725"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,502,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="204.32.185.175" dst_ip="211.67.53.25" src_port="22"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124067"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,502,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="104.180.60.187" dst_ip="205.56.217.79" dst_port="22"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124248"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="191.106.190.104" src_port="80"/>
        </slice>
        <from usec="0" sec="1428123634"/>
        <to usec="0" sec="1428123884"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="158.203.70.63" dst_ip="1.132.98.218" src_port="60625" dst_port="80"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124068"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,502,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="204.32.185.180" dst_ip="108.151.243.151" src_port="22"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123977"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,504,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="186.135.242.120" dst_ip="195.75.85.61" src_port="51048" dst_port="443"/>
            <filter src_ip="186.135.242.120" dst_ip="195.75.85.61"/>
            <filter src_ip="191.106.113.245" dst_ip="195.75.85.61" src_port="50257" dst_port="443"/>
        </slice>
        <from usec="0" sec="1428123601"/>
        <to usec="0" sec="1428124063"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,999,0 0 0 1 1 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="191.106.130.179" src_port="53"/>
        </slice>
        <from usec="0" sec="1428123603"/>
        <to usec="0" sec="1428123978"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="186.135.31.76" dst_ip="131.86.68.233" src_port="143" dst_port="56634"/>
            <filter src_ip="186.135.213.66" dst_ip="131.86.68.233" src_port="993" dst_port="28844"/>
        </slice>
        <from usec="0" sec="1428123603"/>
        <to usec="0" sec="1428123975"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="204.32.143.98" dst_ip="106.90.144.1" src_port="56044" dst_port="443"/>
            <filter src_ip="204.32.143.98" dst_ip="106.90.144.1" src_port="56039" dst_port="443"/>
            <filter src_ip="204.32.143.98" dst_ip="106.90.144.1" src_port="35479" dst_port="80"/>
        </slice>
        <from usec="0" sec="1428123606"/>
        <to usec="0" sec="1428123978"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,504,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="204.46.57.174" dst_ip="51.184.207.195" dst_port="443"/>
            <filter src_ip="158.203.112.122" dst_ip="51.184.207.195" dst_port="443"/>
        </slice>
        <from usec="0" sec="1428124310"/>
        <to usec="0" sec="1428124423"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="191.106.251.64" dst_ip="110.192.31.187" src_port="50232" dst_port="443"/>
            <filter src_ip="191.106.251.64" dst_ip="110.192.31.187" src_port="50231" dst_port="443"/>
            <filter src_ip="191.106.251.64" dst_ip="110.192.31.187" src_port="50230" dst_port="443"/>
        </slice>
        <from usec="0" sec="1428123750"/>
        <to usec="0" sec="1428123915"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="78.243.168.248" dst_ip="204.32.185.174" dst_port="80"/>
        </slice>
        <from usec="0" sec="1428123798"/>
        <to usec="0" sec="1428123978"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,020,0 0 0 1 1 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter src_ip="205.56.221.19" dst_ip="216.56.237.177"/>
        </slice>
        <from usec="0" sec="1428123857"/>
        <to usec="0" sec="1428123871"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,020,0 0 0 1 1 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter src_ip="205.56.211.59" dst_ip="216.106.44.182"/>
        </slice>
        <from usec="0" sec="1428123951"/>
        <to usec="0" sec="1428123965"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,504,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="186.135.79.168" dst_ip="1.53.140.116" src_port="54160" dst_port="443"/>
            <filter src_ip="186.135.6.76" dst_ip="1.53.140.116" src_port="61891" dst_port="443"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124066"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,999,0 0 0 1 1 0 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter src_ip="205.56.218.5" dst_ip="202.159.81.102"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124068"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="158.203.112.16" dst_ip="1.143.212.244" dst_port="443"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124338"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="186.135.213.53" dst_ip="140.168.13.49" dst_port="80"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124068"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="158.203.70.232" dst_ip="5.13.188.241" src_port="50186" dst_port="8333"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124068"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,999,0 0 0 1 1 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="158.203.154.172" dst_port="23134"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124068"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,999,0 0 0 1 1 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.152.214.14" dst_port="29991"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123969"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,503,0 0 0 1 1 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="175.217.35.121" src_port="80"/>
        </slice>
        <from usec="0" sec="1428123601"/>
        <to usec="0" sec="1428124063"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,999,0 0 0 1 1 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.46.132.116" dst_port="30247"/>
        </slice>
        <from usec="0" sec="1428123601"/>
        <to usec="0" sec="1428124286"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,503,0 0 0 1 1 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="135.226.97.159" dst_ip="204.46.58.153" dst_port="80"/>
        </slice>
        <from usec="0" sec="1428123601"/>
        <to usec="0" sec="1428124061"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,999,0 0 0 1 1 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="158.203.232.128" src_port="4878" dst_port="4878"/>
        </slice>
        <from usec="0" sec="1428123602"/>
        <to usec="0" sec="1428124066"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,999,0 0 0 1 1 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="204.191.162.46" dst_ip="172.20.4.8" src_port="53"/>
        </slice>
        <from usec="0" sec="1428123602"/>
        <to usec="0" sec="1428124067"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="21.87.63.101" dst_ip="158.203.157.9" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123606"/>
        <to usec="0" sec="1428124323"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,999,0 0 0 1 1 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="158.203.168.204" dst_port="34087"/>
        </slice>
        <from usec="0" sec="1428123610"/>
        <to usec="0" sec="1428124054"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="51.204.33.189" dst_ip="158.203.155.80" src_port="123" dst_port="123"/>
            <filter src_ip="51.204.33.0" dst_ip="158.203.155.80" src_port="123" dst_port="123"/>
            <filter src_ip="12.98.217.220" dst_ip="158.203.155.80" src_port="43785" dst_port="8888"/>
        </slice>
        <from usec="0" sec="1428123611"/>
        <to usec="0" sec="1428124066"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="158.203.113.243" dst_ip="140.165.234.68" dst_port="4828"/>
        </slice>
        <from usec="0" sec="1428123640"/>
        <to usec="0" sec="1428124035"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,020,0 0 0 1 1 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="205.56.211.49" dst_ip="213.104.176.231"/>
        </slice>
        <from usec="0" sec="1428123737"/>
        <to usec="0" sec="1428123937"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,020,0 0 0 1 1 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="205.56.211.58" dst_ip="217.84.4.161"/>
        </slice>
        <from usec="0" sec="1428123789"/>
        <to usec="0" sec="1428123990"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,503,0 0 0 1 1 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="204.46.153.114" src_port="80"/>
            <filter dst_ip="204.46.153.114" dst_port="8090"/>
        </slice>
        <from usec="0" sec="1428123816"/>
        <to usec="0" sec="1428124068"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="186.135.22.174" dst_ip="148.140.123.16" dst_port="80"/>
        </slice>
        <from usec="0" sec="1428123832"/>
        <to usec="0" sec="1428124008"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,999,0 0 0 1 1 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="186.135.30.15" dst_ip="212.138.16.85" src_port="53"/>
        </slice>
        <from usec="0" sec="1428123900"/>
        <to usec="0" sec="1428124033"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="148.129.34.56" dst_ip="175.217.195.110" src_port="80"/>
        </slice>
        <from usec="0" sec="1428123924"/>
        <to usec="0" sec="1428124020"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="205.56.221.1" dst_ip="77.11.126.141" src_port="80"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124337"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="204.46.133.89" src_port="80"/>
        </slice>
        <from usec="0" sec="1428123881"/>
        <to usec="0" sec="1428124243"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,020,0 0 0 1 1 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter src_ip="205.56.211.58" dst_ip="102.255.37.75"/>
        </slice>
        <from usec="0" sec="1428124005"/>
        <to usec="0" sec="1428124018"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,999,0 0 0 1 1 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="175.217.38.141" dst_port="14745"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124338"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="158.203.112.215" dst_ip="67.63.30.227" dst_port="80"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124336"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,020,0 0 0 1 1 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="204.46.56.41" dst_ip="144.152.66.86"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124331"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,999,0 0 0 1 1 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="191.106.161.174" dst_port="57445"/>
            <filter dst_ip="191.106.161.174" dst_port="44959"/>
        </slice>
        <from usec="0" sec="1428123601"/>
        <to usec="0" sec="1428124428"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="186.135.31.76" dst_ip="131.86.69.145" src_port="143" dst_port="52098"/>
        </slice>
        <from usec="0" sec="1428123604"/>
        <to usec="0" sec="1428124335"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="204.46.57.36" dst_ip="90.75.21.112" src_port="61033" dst_port="443"/>
            <filter src_ip="186.135.7.54" dst_ip="90.75.21.112" src_port="60802" dst_port="80"/>
            <filter src_ip="158.203.58.142" dst_ip="90.75.21.112" src_port="49793" dst_port="80"/>
            <filter src_ip="186.135.78.171" dst_ip="90.75.21.112" src_port="51788" dst_port="80"/>
        </slice>
        <from usec="0" sec="1428123625"/>
        <to usec="0" sec="1428124314"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="191.106.40.77" dst_port="25"/>
        </slice>
        <from usec="0" sec="1428123636"/>
        <to usec="0" sec="1428124306"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="143.149.143.244" dst_ip="191.106.71.180" src_port="80"/>
            <filter src_ip="15.85.144.69" dst_ip="191.106.71.180" src_port="80"/>
        </slice>
        <from usec="0" sec="1428123677"/>
        <to usec="0" sec="1428124316"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,999,0 0 0 1 1 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.217.233.96" dst_port="4130"/>
        </slice>
        <from usec="0" sec="1428123686"/>
        <to usec="0" sec="1428124332"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,504,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="186.158.168.227" dst_ip="223.54.120.138" dst_port="443"/>
            <filter src_ip="204.46.58.61" dst_ip="223.54.120.138" dst_port="443"/>
        </slice>
        <from usec="0" sec="1428123802"/>
        <to usec="0" sec="1428124324"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="158.203.114.81" dst_ip="213.122.18.36" dst_port="80"/>
        </slice>
        <from usec="0" sec="1428123972"/>
        <to usec="0" sec="1428124255"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="186.135.212.224" dst_ip="121.85.17.235" src_port="57821" dst_port="80"/>
            <filter src_ip="186.135.212.224" dst_ip="121.85.17.235" src_port="57820" dst_port="80"/>
            <filter src_ip="186.135.212.224" dst_ip="121.85.17.235" src_port="53005" dst_port="554"/>
            <filter src_ip="186.135.212.224" dst_ip="121.85.17.235" src_port="51051" dst_port="1755"/>
        </slice>
        <from usec="0" sec="1428124008"/>
        <to usec="0" sec="1428124338"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,901,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="158.203.112.76" dst_ip="204.7.220.48" dst_port="80"/>
        </slice>
        <from usec="0" sec="1428124255"/>
        <to usec="0" sec="1428124256"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="191.106.230.157" dst_ip="55.66.176.39" src_port="62389" dst_port="443"/>
        </slice>
        <from usec="0" sec="1428124259"/>
        <to usec="0" sec="1428124264"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,020,0 0 0 1 1 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="196.45.59.66"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124428"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="158.203.112.155" dst_ip="55.65.180.71" src_port="39257" dst_port="80"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124428"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,020,0 0 0 1 1 0 0 0 0 0 0 0,ntscTCPICterp">
        <slice>
            <filter src_ip="204.32.171.130" dst_ip="122.67.211.43" src_port="8080" dst_port="3644"/>
            <filter src_ip="204.32.171.130" dst_ip="122.67.211.43" src_port="8080" dst_port="3631"/>
            <filter src_ip="204.32.171.130" dst_ip="122.67.211.43" src_port="80" dst_port="3649"/>
            <filter src_ip="204.32.171.130" dst_ip="122.67.211.43" src_port="80" dst_port="3643"/>
            <filter src_ip="204.32.171.198" dst_ip="122.67.211.43"/>
        </slice>
        <from usec="0" sec="1428123601"/>
        <to usec="0" sec="1428124428"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,504,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="78.210.198.205" dst_ip="175.152.215.216" dst_port="443"/>
            <filter src_ip="78.188.26.159" dst_ip="175.152.215.216" dst_port="443"/>
        </slice>
        <from usec="0" sec="1428124069"/>
        <to usec="0" sec="1428124389"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="158.203.146.235" dst_ip="12.25.147.149" src_port="33142" dst_port="19321"/>
        </slice>
        <from usec="0" sec="1428124107"/>
        <to usec="0" sec="1428124343"/>
    </anomaly>
    <anomaly type="notice" value="0.816302,1.310910,020,0 0 0 1 1 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="205.56.211.49" dst_ip="9.110.62.162"/>
        </slice>
        <from usec="0" sec="1428124141"/>
        <to usec="0" sec="1428124341"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="204.191.162.46" dst_ip="172.21.12.1" src_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.611265,1.327550,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="186.135.74.62" src_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123977"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="191.106.197.59"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="186.135.28.20"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.611265,1.327550,503,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="205.56.211.58" dst_ip="133.40.27.250"/>
            <filter src_ip="205.56.211.58" dst_port="80"/>
            <filter src_ip="205.56.211.59" dst_ip="133.40.27.250"/>
            <filter src_ip="205.56.211.59" dst_port="80"/>
            <filter dst_ip="133.40.27.250" dst_port="80"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123978"/>
    </anomaly>
    <anomaly type="notice" value="0.801740,1.311780,020,0 0 0 1 0 0 1 0 0 1 0 0,icmp_error">
        <slice>
            <filter dst_ip="205.56.217.224"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="158.203.218.69" src_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="117.219.17.55"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="88.149.83.214"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.801740,1.311780,020,0 0 0 1 0 0 1 0 0 1 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="111.150.92.24"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="175.217.148.233"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="213.221.89.172"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="175.217.255.154"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="213.221.89.178"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="130.84.5.39"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="137.6.105.113"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.801740,1.311780,999,0 0 0 1 0 0 1 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="186.135.6.233" dst_port="6881"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.801740,1.311780,999,0 0 0 1 0 0 1 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="175.217.34.73" dst_port="14752"/>
            <filter dst_ip="175.217.34.73" dst_port="11460"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.819654,1.324570,999,1 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.56.223.136" dst_port="26123"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124438"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="205.56.220.49"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,010,0 0 0 0 0 0 1 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="205.56.221.1" dst_ip="190.191.239.33" dst_port="9872"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="175.217.33.149"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="130.84.67.167"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="73.199.42.176" src_port="80"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="195.76.230.217" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,053,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="205.56.211.59" dst_port="80"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="221.86.42.146" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.217.72.14" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.32.153.168" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.46.159.168" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="186.135.28.21" dst_ip="210.253.6.204" dst_port="53"/>
            <filter src_ip="186.135.28.20" dst_ip="210.253.6.204" dst_port="53"/>
            <filter src_ip="186.135.28.22" dst_ip="210.253.6.204" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.46.159.173" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="158.203.161.53" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="175.217.33.28" src_port="80"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.32.174.11" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,504,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="80.53.239.234" dst_port="443"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.611265,1.327550,503,0 0 0 1 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="97.21.175.187" dst_ip="191.106.27.148" src_port="80"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124068"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.56.219.141" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.56.219.137" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.217.6.191" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="186.135.112.29" src_port="80"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.217.27.229" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.217.39.239" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.56.200.39" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.217.15.182" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.217.74.95" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.217.74.81" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="204.46.159.173" dst_ip="143.170.253.243" dst_port="53"/>
            <filter src_ip="204.32.153.163" dst_ip="143.170.253.243" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.801740,1.311780,999,0 0 0 1 0 0 1 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="204.46.159.173" dst_ip="180.103.77.105" dst_port="53"/>
            <filter src_ip="204.32.153.163" dst_ip="180.103.77.105" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="205.56.219.141" dst_ip="69.178.98.89" dst_port="53"/>
            <filter src_ip="204.46.159.173" dst_ip="69.178.98.89" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="205.56.213.98" dst_port="80"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.56.220.23" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.217.74.33" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.217.72.188" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.46.56.39" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,010,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="80" dst_port="80"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123646"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.56.200.39" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123690"/>
        <to usec="0" sec="1428123736"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="66.100.43.128" src_port="43215" dst_port="8888"/>
        </slice>
        <from usec="0" sec="1428123735"/>
        <to usec="0" sec="1428123781"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="38.127.187.149" src_port="80" dst_port="80"/>
        </slice>
        <from usec="0" sec="1428123690"/>
        <to usec="0" sec="1428123781"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="175.217.74.148" src_port="53"/>
            <filter dst_ip="175.217.74.148" dst_port="53"/>
            <filter dst_ip="175.217.74.148"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123826"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="186.153.239.197"/>
        </slice>
        <from usec="0" sec="1428123780"/>
        <to usec="0" sec="1428123826"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="195.124.84.19" dst_ip="191.106.83.42" src_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123826"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="175.217.34.204"/>
        </slice>
        <from usec="0" sec="1428123780"/>
        <to usec="0" sec="1428123826"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="186.135.30.15" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428123826"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.56.221.230"/>
        </slice>
        <from usec="0" sec="1428123780"/>
        <to usec="0" sec="1428123826"/>
    </anomaly>
    <anomaly type="notice" value="0.611265,1.327550,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.56.221.229" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123759"/>
        <to usec="0" sec="1428123888"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="120.150.36.110"/>
        </slice>
        <from usec="0" sec="1428123780"/>
        <to usec="0" sec="1428123826"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="22.174.201.10"/>
        </slice>
        <from usec="0" sec="1428123780"/>
        <to usec="0" sec="1428123826"/>
    </anomaly>
    <anomaly type="notice" value="0.814359,1.342030,999,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.56.200.39" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123739"/>
        <to usec="0" sec="1428124444"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,010,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="80" dst_port="80"/>
        </slice>
        <from usec="0" sec="1428124185"/>
        <to usec="0" sec="1428124231"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="205.56.211.59"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="221.86.42.146"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.32.153.168"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="175.217.79.146" src_port="80"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.46.159.168" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="186.135.28.21" dst_ip="210.253.6.204" dst_port="53"/>
            <filter src_ip="186.135.28.20" dst_ip="210.253.6.204" dst_port="53"/>
            <filter src_ip="186.135.28.16" dst_ip="210.253.6.204" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.32.174.11"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="159.157.98.175"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.46.135.105" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="214.77.175.169"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="135.198.146.240"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="158.203.146.235" dst_port="33142"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.56.219.141"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.56.219.137" dst_port="53"/>
        </slice>
        <from usec="0" sec="1428123780"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="130.84.5.31"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,503,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="186.153.239.178"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.217.6.191"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="186.135.103.171" dst_port="6881"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.217.27.229"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.217.39.239"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.801740,1.311780,999,0 0 0 1 0 0 1 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="191.106.108.99" dst_port="6881"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,010,0 0 0 0 0 0 1 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter dst_ip="106.186.167.183"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.217.126.195" dst_port="6881"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.217.15.182"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="158.203.41.141" src_port="80"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.217.74.95"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,020,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="127.23.159.255"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.217.74.81"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="158.203.59.95" dst_port="6881"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="191.106.197.133"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="148.130.186.22"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="205.56.218.155" dst_port="80"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="205.56.218.206"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.56.220.23"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="175.217.194.172"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="76.7.70.16"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="158.203.155.11" dst_port="19835"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.217.74.33"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,010,0 0 0 0 0 0 1 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="205.56.221.1" dst_ip="190.191.239.33" dst_port="9872"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.217.72.188"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.46.56.39"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.217.74.148" src_port="53"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="204.191.162.46" dst_ip="172.21.12.1" src_port="53"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="186.153.239.197" src_port="53"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.217.72.14" src_port="53"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="195.124.84.19" dst_ip="191.106.83.42" src_port="53"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="195.124.84.19" dst_ip="191.106.118.222" src_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="186.135.28.20" src_port="53"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.46.159.173" src_port="53"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,rflatDNS">
        <slice>
            <filter dst_ip="157.235.103.141" src_port="53"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="158.203.218.125" src_port="53"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.604146,1.344970,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="158.203.218.69" src_port="53"/>
        </slice>
        <from usec="0" sec="1428124275"/>
        <to usec="0" sec="1428124321"/>
    </anomaly>
    <anomaly type="notice" value="0.611265,1.327550,999,0 0 0 1 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="195.124.84.19" dst_ip="205.56.220.68" src_port="53"/>
        </slice>
        <from usec="0" sec="1428123600"/>
        <to usec="0" sec="1428124428"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="216.104.156.109"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="91.51.57.242"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.796325,1.329410,010,0 0 0 0 0 0 1 0 0 1 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="186.135.83.144" dst_ip="70.28.92.163" dst_port="36000"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="65.158.244.174"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,502,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="72.226.200.102"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="76.139.100.126"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.796325,1.329410,999,0 0 0 0 0 0 1 0 0 1 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="195.124.84.19" dst_ip="191.106.197.52" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.796325,1.329410,999,0 0 0 0 0 0 1 0 0 1 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="195.124.84.19" dst_ip="191.106.9.173" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="191.106.98.154"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="191.106.230.76"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="191.106.181.1"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="191.106.189.124"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="91.51.57.242" dst_ip="186.12.144.96" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="186.135.79.89" src_port="443"/>
            <filter src_ip="204.33.59.103" dst_ip="186.135.79.89" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="205.92.4.97" dst_ip="186.135.242.146" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="186.135.242.100" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="186.135.213.66" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="186.135.30.91" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.796325,1.329410,999,0 0 0 0 0 0 1 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="186.135.28.21" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.796325,1.329410,999,0 0 0 0 0 0 1 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="186.135.28.22" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="186.135.103.53" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.796325,1.329410,999,0 0 0 0 0 0 1 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="204.46.159.173" dst_ip="180.103.180.180" dst_port="53"/>
            <filter src_ip="204.32.153.163" dst_ip="180.103.180.180" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.796325,1.329410,999,0 0 0 0 0 0 1 0 0 1 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="65.9.213.204" dst_ip="175.217.32.188"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="175.217.34.167" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="175.217.35.110" src_port="80"/>
            <filter dst_ip="175.217.35.110" dst_port="27175"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.796325,1.329410,999,0 0 0 0 0 0 1 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.217.74.94" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.796325,1.329410,999,0 0 0 0 0 0 1 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.217.145.147" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="55.79.90.190" dst_ip="175.217.182.92" dst_port="33434"/>
            <filter src_ip="55.79.95.115" dst_ip="175.217.182.92" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.796325,1.329410,999,0 0 0 0 0 0 1 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.217.165.18" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="175.217.90.153" dst_port="993"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="70.148.147.205" dst_ip="175.217.76.144" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="175.217.77.98" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.669356,1.253890,999,0 0 0 1 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="157.235.108.35" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="158.167.81.188"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="158.203.155.185" src_port="443"/>
            <filter src_ip="204.33.203.211" dst_ip="158.203.155.185" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,503,0 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="196.139.121.49" dst_ip="158.203.105.243"/>
            <filter src_ip="196.139.121.49" src_port="80"/>
            <filter dst_ip="158.203.105.243" src_port="80"/>
            <filter dst_ip="158.203.105.243" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="158.203.112.140" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,503,0 0 0 0 0 0 0 0 0 1 0 0,point_to_point">
        <slice>
            <filter src_ip="122.7.168.155" dst_ip="158.203.112.76" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="158.203.112.90" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="158.203.112.16" src_port="80"/>
            <filter dst_ip="158.203.112.16" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="158.203.114.90" dst_port="61292"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="70.29.14.234" dst_ip="158.203.23.187" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="51.131.1.70"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="131.65.146.37"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,502,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="195.157.156.133"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.669356,1.253890,901,0 0 0 1 0 0 0 0 0 1 0 0,malphfl">
        <slice>
            <filter src_ip="205.56.219.146" dst_ip="195.98.43.125" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="195.15.67.247"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,020,0 0 0 0 0 0 0 0 0 1 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="196.164.25.247"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,502,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="204.95.154.40"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.796325,1.329410,999,0 0 0 0 0 0 1 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.46.158.231" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.796325,1.329410,999,0 0 0 0 0 0 1 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.46.153.242" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="204.46.151.114"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.796325,1.329410,999,0 0 0 0 0 0 1 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.46.56.40" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="204.46.62.34" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.669356,1.253890,503,0 0 0 1 0 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="158.203.114.42" dst_ip="204.33.59.57"/>
            <filter src_ip="158.203.114.42" dst_port="80"/>
            <filter src_ip="204.46.57.36" dst_ip="204.33.59.57" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.669356,1.253890,502,0 0 0 1 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="108.151.243.151" dst_ip="204.32.185.180" dst_port="22"/>
            <filter src_ip="143.157.19.239" dst_ip="204.32.185.180" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.669356,1.253890,999,0 0 0 1 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="23.249.33.48" dst_ip="204.32.153.163" src_port="53"/>
            <filter src_ip="23.249.33.45" dst_ip="204.32.153.163" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,504,0 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="196.139.121.48" dst_ip="205.56.210.15"/>
            <filter src_ip="196.139.121.48" src_port="443"/>
            <filter dst_ip="205.56.210.15" src_port="53"/>
            <filter dst_ip="205.56.210.15" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,503,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="220.85.157.101" dst_ip="205.56.210.23" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.796325,1.329410,503,0 0 0 0 0 0 1 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="205.56.211.58" dst_port="80"/>
            <filter dst_ip="205.56.211.58" dst_port="38574"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.796325,1.329410,999,0 0 0 0 0 0 1 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.56.219.146" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.796325,1.329410,999,0 0 0 0 0 0 1 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.56.219.138" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.796325,1.329410,999,0 0 0 0 0 0 1 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.56.218.68" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,503,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="78.134.124.185" dst_ip="205.56.218.229" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.796325,1.329410,999,0 0 0 0 0 0 1 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.56.218.102" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,502,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="104.180.60.187" dst_ip="205.56.216.49" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,020,0 0 0 0 0 0 0 0 0 1 0 0,DDoSIC">
        <slice>
            <filter dst_ip="205.56.223.213"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.796325,1.329410,999,0 0 0 0 0 0 1 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.56.223.170" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.796325,1.329410,999,0 0 0 0 0 0 1 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="205.56.221.19" dst_port="38574"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.796325,1.329410,020,0 0 0 0 0 0 1 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="205.56.221.80" dst_port="80"/>
            <filter dst_ip="205.56.221.80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="200.94.158.26"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="202.221.8.65"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="223.6.192.11"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.796325,1.329410,999,0 0 0 0 0 0 1 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="186.135.28.22" dst_ip="221.86.42.148" dst_port="53"/>
            <filter src_ip="186.135.28.21" dst_ip="221.86.42.148" dst_port="53"/>
            <filter src_ip="186.135.28.16" dst_ip="221.86.42.148" dst_port="53"/>
            <filter src_ip="186.135.28.20" dst_ip="221.86.42.148" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="214.87.41.12"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.796325,1.329410,999,0 0 0 0 0 0 1 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="186.135.28.21" dst_ip="210.253.6.205" dst_port="53"/>
            <filter src_ip="186.135.28.22" dst_ip="210.253.6.205" dst_port="53"/>
            <filter src_ip="186.135.28.20" dst_ip="210.253.6.205" dst_port="53"/>
            <filter src_ip="186.135.28.16" dst_ip="210.253.6.205" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="56.116.188.225"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.669356,1.253890,502,0 0 0 1 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="204.46.156.47" dst_ip="22.174.201.34" src_port="22"/>
            <filter src_ip="204.46.129.136" dst_ip="22.174.201.34" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="2.12.192.60"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="38.77.132.165"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="1.195.120.165"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,502,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="8.51.1.54"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.669356,1.253890,999,0 0 0 1 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="205.56.210.23" dst_ip="12.22.176.218" src_port="443" dst_port="49257"/>
            <filter src_ip="205.56.210.23" dst_ip="12.22.176.218" src_port="443" dst_port="49247"/>
            <filter src_ip="205.56.210.23" dst_ip="12.22.176.218" src_port="40000" dst_port="56841"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="15.89.81.32"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.669356,1.253890,999,0 0 0 1 0 0 0 0 0 1 0 0,malphfl">
        <slice>
            <filter src_ip="205.56.223.136" dst_ip="126.18.45.232" dst_port="3000"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.669356,1.253890,504,0 0 0 1 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="162.79.249.208" dst_ip="117.252.232.43" src_port="62833" dst_port="443"/>
            <filter src_ip="162.79.249.208" dst_ip="117.252.232.43" src_port="48934" dst_port="443"/>
            <filter src_ip="162.79.249.208" dst_ip="117.252.232.43" src_port="33333" dst_port="443"/>
            <filter src_ip="162.79.249.208" dst_ip="117.252.232.43" src_port="8591" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="40.86.95.45"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.796325,1.329410,020,0 0 0 0 0 0 1 0 0 1 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="111.150.82.88"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662861,1.272310,502,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="104.180.60.187"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
