<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="suspicious" value="1.328520,1.580990,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="55.111.21.18" dst_ip="167.4.169.35" src_port="80" dst_port="5454"/>
        </slice>
        <from usec="0" sec="1430802510"/>
        <to usec="0" sec="1430802517"/>
    </anomaly>
    <anomaly type="suspicious" value="1.502590,1.530770,010,1 1 1 1 0 0 0 0 0 1 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.185.70.182"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.328520,1.580990,502,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="210.21.120.124" dst_port="22"/>
        </slice>
        <from usec="0" sec="1430802185"/>
        <to usec="0" sec="1430802190"/>
    </anomaly>
    <anomaly type="suspicious" value="1.328520,1.580990,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="133.100.49.15" dst_port="23"/>
        </slice>
        <from usec="0" sec="1430802754"/>
        <to usec="0" sec="1430802766"/>
    </anomaly>
    <anomaly type="suspicious" value="1.328520,1.580990,502,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="97.57.22.66" dst_port="22"/>
        </slice>
        <from usec="0" sec="1430802298"/>
        <to usec="0" sec="1430802492"/>
    </anomaly>
    <anomaly type="suspicious" value="1.501810,1.614430,999,1 1 1 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="100.14.227.201" src_port="5085" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802532"/>
    </anomaly>
    <anomaly type="suspicious" value="1.328520,1.580990,504,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="186.170.130.179" dst_ip="195.150.32.12" src_port="62354" dst_port="443"/>
        </slice>
        <from usec="0" sec="1430802852"/>
        <to usec="0" sec="1430802854"/>
    </anomaly>
    <anomaly type="suspicious" value="1.390020,1.577170,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.236.213.128" src_port="42230" dst_port="19"/>
        </slice>
        <from usec="0" sec="1430802540"/>
        <to usec="0" sec="1430802600"/>
    </anomaly>
    <anomaly type="suspicious" value="1.328520,1.580990,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="128.138.146.211" dst_port="23"/>
        </slice>
        <from usec="0" sec="1430802138"/>
        <to usec="0" sec="1430802157"/>
    </anomaly>
    <anomaly type="suspicious" value="1.328520,1.580990,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="203.168.21.197" dst_port="23"/>
        </slice>
        <from usec="0" sec="1430802256"/>
        <to usec="0" sec="1430802272"/>
    </anomaly>
    <anomaly type="suspicious" value="1.390020,1.577170,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="63.115.29.68" src_port="53654"/>
            <filter src_ip="63.115.29.68" src_port="53655" dst_port="18350"/>
        </slice>
        <from usec="0" sec="1430802810"/>
        <to usec="0" sec="1430802856"/>
    </anomaly>
    <anomaly type="suspicious" value="1.328520,1.580990,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="103.153.184.76" src_port="2001" dst_port="80"/>
        </slice>
        <from usec="0" sec="1430802237"/>
        <to usec="0" sec="1430802789"/>
    </anomaly>
    <anomaly type="suspicious" value="1.328520,1.580990,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="198.14.125.184" src_port="5271" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1430802614"/>
        <to usec="0" sec="1430802618"/>
    </anomaly>
    <anomaly type="suspicious" value="1.328520,1.580990,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="128.168.236.129" dst_port="23"/>
        </slice>
        <from usec="0" sec="1430802723"/>
        <to usec="0" sec="1430802728"/>
    </anomaly>
    <anomaly type="suspicious" value="1.328520,1.580990,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="133.202.215.112" dst_port="23"/>
        </slice>
        <from usec="0" sec="1430802509"/>
        <to usec="0" sec="1430802517"/>
    </anomaly>
    <anomaly type="suspicious" value="1.328520,1.580990,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="101.163.83.111" dst_port="23"/>
        </slice>
        <from usec="0" sec="1430802050"/>
        <to usec="0" sec="1430802073"/>
    </anomaly>
    <anomaly type="suspicious" value="1.328520,1.580990,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="143.163.17.110" dst_port="1433"/>
            <filter src_ip="143.163.17.110" dst_port="23"/>
        </slice>
        <from usec="0" sec="1430802181"/>
        <to usec="0" sec="1430802192"/>
    </anomaly>
    <anomaly type="suspicious" value="1.328520,1.580990,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.126.15.188" dst_port="23"/>
        </slice>
        <from usec="0" sec="1430802823"/>
        <to usec="0" sec="1430802839"/>
    </anomaly>
    <anomaly type="suspicious" value="1.328520,1.580990,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="133.124.101.177" dst_port="23"/>
        </slice>
        <from usec="0" sec="1430802853"/>
        <to usec="0" sec="1430802865"/>
    </anomaly>
    <anomaly type="suspicious" value="1.328520,1.580990,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="128.168.236.129"/>
        </slice>
        <from usec="0" sec="1430802723"/>
        <to usec="0" sec="1430802728"/>
    </anomaly>
    <anomaly type="suspicious" value="1.328520,1.580990,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="203.168.21.197"/>
        </slice>
        <from usec="0" sec="1430802256"/>
        <to usec="0" sec="1430802272"/>
    </anomaly>
    <anomaly type="suspicious" value="1.121980,1.576580,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="54.175.207.14" dst_ip="155.107.38.111" dst_port="80"/>
        </slice>
        <from usec="0" sec="1430802357"/>
        <to usec="0" sec="1430802638"/>
    </anomaly>
    <anomaly type="suspicious" value="1.121980,1.576580,503,0 0 0 1 1 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="93.76.147.10" src_port="80"/>
        </slice>
        <from usec="0" sec="1430802001"/>
        <to usec="0" sec="1430802557"/>
    </anomaly>
    <anomaly type="suspicious" value="1.199260,1.543500,504,1 0 0 1 1 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="82.80.245.159" dst_port="443"/>
        </slice>
        <from usec="0" sec="1430802010"/>
        <to usec="0" sec="1430802862"/>
    </anomaly>
    <anomaly type="suspicious" value="1.121980,1.576580,999,0 0 0 1 1 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="101.52.235.109" dst_ip="177.53.49.140" src_port="33104" dst_port="31992"/>
            <filter src_ip="101.52.235.109" dst_ip="177.53.49.140" src_port="33102" dst_port="31992"/>
            <filter src_ip="101.52.235.109" dst_ip="177.53.49.140"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802654"/>
    </anomaly>
    <anomaly type="suspicious" value="1.121980,1.576580,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="21.186.141.253" dst_ip="161.138.24.100" src_port="80"/>
        </slice>
        <from usec="0" sec="1430802491"/>
        <to usec="0" sec="1430802621"/>
    </anomaly>
    <anomaly type="suspicious" value="1.121980,1.576580,504,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="210.240.170.213" dst_ip="107.26.173.57" dst_port="443"/>
            <filter src_ip="210.240.170.213" dst_ip="107.26.170.103" dst_port="443"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802738"/>
    </anomaly>
    <anomaly type="suspicious" value="1.121980,1.576580,504,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="107.115.216.113" dst_ip="155.107.122.58" src_port="443" dst_port="54977"/>
            <filter src_ip="107.115.216.113" dst_ip="155.107.192.208" src_port="443" dst_port="61320"/>
            <filter src_ip="107.115.216.113" dst_ip="161.138.128.189" src_port="443" dst_port="51867"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802738"/>
    </anomaly>
    <anomaly type="suspicious" value="1.121980,1.576580,053,0 0 0 1 1 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="49.48.154.148" dst_ip="177.53.83.6" src_port="80"/>
        </slice>
        <from usec="0" sec="1430802001"/>
        <to usec="0" sec="1430802735"/>
    </anomaly>
    <anomaly type="suspicious" value="1.121980,1.576580,999,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="107.115.225.198" dst_ip="177.53.171.241" src_port="46173" dst_port="993"/>
            <filter src_ip="107.115.225.198" dst_ip="161.138.95.212" src_port="60055" dst_port="143"/>
        </slice>
        <from usec="0" sec="1430802053"/>
        <to usec="0" sec="1430802735"/>
    </anomaly>
    <anomaly type="suspicious" value="1.194160,1.572750,503,0 0 0 1 1 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="52.109.228.23" src_port="80"/>
            <filter src_ip="144.226.190.239" dst_ip="177.53.241.248" src_port="80"/>
        </slice>
        <from usec="0" sec="1430802308"/>
        <to usec="0" sec="1430802631"/>
    </anomaly>
    <anomaly type="suspicious" value="1.185880,1.546210,999,1 1 0 1 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="211.151.39.252" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802002"/>
        <to usec="0" sec="1430802765"/>
    </anomaly>
    <anomaly type="suspicious" value="1.404690,1.556010,020,1 1 1 1 0 0 1 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="169.236.213.128"/>
        </slice>
        <from usec="0" sec="1430802001"/>
        <to usec="0" sec="1430802736"/>
    </anomaly>
    <anomaly type="suspicious" value="1.388770,1.577730,999,1 0 0 1 1 0 1 1 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="161.138.196.239" dst_port="16582"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802736"/>
    </anomaly>
    <anomaly type="suspicious" value="1.483610,1.581930,999,0 0 0 1 1 0 1 1 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="177.53.184.201"/>
            <filter dst_ip="177.53.184.201" src_port="53"/>
            <filter dst_ip="177.53.184.201"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.079930,1.516440,504,1 0 0 1 0 0 0 1 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="155.107.182.186" dst_port="443"/>
            <filter src_ip="155.107.182.186" dst_port="80"/>
            <filter dst_ip="144.235.248.206" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.055000,1.567490,999,0 0 0 0 0 0 1 1 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="177.53.249.1" dst_port="3027"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.259830,1.484080,503,1 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="155.107.8.191" dst_ip="172.100.224.214" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.259830,1.484080,503,1 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="144.201.132.78" dst_ip="155.107.182.75" src_port="80" dst_port="54496"/>
            <filter src_ip="144.201.132.78" dst_ip="155.107.182.75" src_port="80" dst_port="54495"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.259830,1.484080,503,1 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="211.151.54.227" dst_ip="222.35.156.254" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.074260,1.546200,503,0 0 0 1 0 0 1 1 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="161.138.95.230" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.186500,1.518460,503,0 0 0 0 0 0 0 0 0 1 1 0,point_to_point">
        <slice>
            <filter src_ip="210.39.58.100" dst_ip="177.53.109.191" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.441400,1.519660,503,1 0 0 0 0 0 1 1 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="222.35.156.254" dst_ip="211.151.54.227" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.186500,1.518460,999,0 0 0 0 0 0 0 0 0 1 1 0,malphfl">
        <slice>
            <filter src_ip="56.240.97.230" dst_ip="211.151.48.244" dst_port="3001"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.186500,1.518460,999,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="167.4.25.145" dst_ip="107.54.201.57" src_port="65044" dst_port="3478"/>
            <filter src_ip="167.4.25.145" dst_ip="42.238.107.124" src_port="59309" dst_port="443"/>
            <filter src_ip="167.4.25.145" dst_ip="215.94.194.194" src_port="59311" dst_port="443"/>
            <filter src_ip="167.4.25.145" dst_ip="42.238.107.135" src_port="59310" dst_port="443"/>
            <filter src_ip="167.4.25.145" dst_ip="46.74.143.140" src_port="58544" dst_port="8054"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.186500,1.518460,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="24.229.100.229" dst_ip="155.107.183.32" src_port="80" dst_port="59499"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.186500,1.518460,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="222.227.228.153" dst_ip="161.138.24.214" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.271210,1.492430,504,0 0 0 1 0 0 1 0 0 1 1 0,mptmp">
        <slice>
            <filter dst_ip="155.107.228.132"/>
            <filter dst_ip="177.53.82.242" src_port="443"/>
            <filter dst_ip="161.138.24.222" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.186500,1.518460,999,0 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter dst_ip="161.39.137.164" dst_port="25"/>
            <filter dst_ip="161.138.94.97" dst_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.186500,1.518460,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="161.138.95.230" dst_ip="207.124.177.222" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.186500,1.518460,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="161.138.188.220" dst_ip="29.81.142.160" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.186500,1.518460,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="16.174.98.52" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.744420,1.516180,999,1 1 1 1 0 0 0 0 0 1 1 0,ipv4gretun">
        <slice>
            <filter src_ip="211.151.57.92" dst_ip="213.87.58.66"/>
            <filter src_ip="211.151.57.92" dst_ip="215.239.156.120"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.208340,1.745880,999,1 1 1 1 1 1 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="217.57.243.144" src_port="56791" dst_port="123"/>
            <filter src_ip="217.57.243.144" src_port="56791" dst_port="19"/>
            <filter src_ip="217.57.243.144" src_port="56791" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1430802360"/>
        <to usec="0" sec="1430802370"/>
    </anomaly>
    <anomaly type="anomalous" value="1.732620,1.537890,502,1 1 1 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="218.197.98.92" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.022390,1.552590,011,1 1 1 1 1 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter dst_ip="192.161.205.211" src_port="3389" dst_port="6000"/>
            <filter dst_ip="143.236.138.204" src_port="22" dst_port="9090"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.811780,1.728790,503,0 0 0 1 1 1 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="10.247.184.225" dst_ip="155.107.183.184" src_port="80"/>
        </slice>
        <from usec="0" sec="1430802489"/>
        <to usec="0" sec="1430802702"/>
    </anomaly>
    <anomaly type="anomalous" value="6.487920,5.491380,010,1 1 1 1 1 1 1 1 1 1 1 1,ntscSYNt">
        <slice>
            <filter src_ip="102.21.136.240" src_port="42642"/>
            <filter src_port="42642" dst_port="8080"/>
            <filter src_port="42642" dst_port="8888"/>
            <filter src_ip="102.21.136.240" src_port="41995" dst_port="8080"/>
            <filter src_ip="102.21.136.240" src_port="41995" dst_port="8888"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.787400,1.765340,010,1 1 1 1 1 1 1 0 0 1 1 1,ntscSYNt">
        <slice>
            <filter src_ip="143.236.138.204" src_port="9090" dst_port="22"/>
            <filter src_ip="192.161.205.211" src_port="6000" dst_port="3389"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.487490,1.722180,504,1 0 0 1 1 1 0 0 0 1 1 1,ntscACK">
        <slice>
            <filter src_ip="210.240.37.2" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.787400,1.765340,999,1 1 1 1 1 1 1 0 0 1 1 1,ntscUDP">
        <slice>
            <filter src_ip="93.5.94.93" src_port="52321" dst_port="1900"/>
            <filter src_ip="93.5.94.93" src_port="52321" dst_port="123"/>
            <filter src_ip="93.5.94.93" src_port="52321" dst_port="19"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.844800,1.798710,503,1 1 1 1 1 1 1 1 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="177.53.190.200" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.844800,1.798710,010,1 1 1 1 1 1 1 1 0 1 1 1,ntscSYNt">
        <slice>
            <filter src_ip="74.160.163.215" src_port="12200" dst_port="1080"/>
            <filter src_ip="74.160.163.215" src_port="12200" dst_port="1081"/>
            <filter src_ip="74.160.163.215" src_port="12200" dst_port="1095"/>
            <filter src_ip="74.160.163.215" src_port="12200" dst_port="60088"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.032730,1.571990,503,1 1 0 1 0 0 1 1 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="211.151.57.215" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.787400,1.765340,010,1 1 1 1 1 1 1 0 0 1 1 1,ntscSYNt">
        <slice>
            <filter src_ip="45.160.64.128" src_port="12200" dst_port="1081"/>
            <filter src_ip="45.160.64.128" src_port="12200" dst_port="1080"/>
            <filter src_ip="45.160.64.128" src_port="12200" dst_port="60088"/>
            <filter src_ip="45.160.64.128" src_port="12200" dst_port="1095"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.451170,1.751890,503,0 0 0 1 1 1 0 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="155.107.182.186" src_port="80"/>
            <filter dst_ip="155.107.182.186" dst_port="49727"/>
            <filter src_ip="214.157.94.222" dst_ip="155.107.182.186" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.787400,1.765340,999,1 1 1 1 1 1 1 0 0 1 1 1,ntscUDP">
        <slice>
            <filter src_ip="45.138.213.202" dst_port="3702"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.119120,1.606210,010,1 1 1 0 0 0 0 0 0 1 1 1,ntscSYNt">
        <slice>
            <filter src_ip="198.82.175.31" src_port="2096" dst_port="3389"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.844800,1.798710,503,1 1 1 1 1 1 1 1 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="210.248.183.232" src_port="53"/>
            <filter dst_ip="210.248.183.232" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.040570,1.569320,503,1 0 0 1 1 0 0 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="211.151.57.215" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.487490,1.722180,999,1 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="211.151.48.193"/>
            <filter src_ip="211.151.48.209"/>
            <filter src_ip="211.151.48.244"/>
            <filter src_port="3001"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.451170,1.751890,503,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="155.107.119.205" src_port="80"/>
            <filter dst_ip="155.107.119.205" src_port="443"/>
            <filter dst_ip="155.107.140.73" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.791690,1.512200,502,1 1 1 1 0 0 1 0 0 1 1 0,mptmp">
        <slice>
            <filter dst_ip="218.197.98.92" src_port="22"/>
            <filter dst_ip="97.57.22.66" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.701900,1.587620,503,0 0 0 0 0 0 0 0 0 1 1 1,mptplaHTTP">
        <slice>
            <filter dst_ip="155.107.8.191" src_port="80"/>
            <filter dst_ip="155.107.8.191" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.701900,1.587620,503,0 0 0 0 0 0 0 0 0 1 1 1,ptmplaHTTP">
        <slice>
            <filter src_ip="90.114.199.63" dst_ip="161.138.128.162" src_port="80" dst_port="59371"/>
            <filter src_ip="90.114.199.63" dst_ip="161.138.128.162" src_port="80" dst_port="59369"/>
            <filter src_ip="90.114.199.63" dst_ip="161.138.128.162" src_port="80" dst_port="59368"/>
            <filter src_ip="90.114.199.63" dst_ip="210.240.58.91" src_port="80" dst_port="54086"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.701900,1.587620,503,0 0 0 0 0 0 0 0 0 1 1 1,point_to_point">
        <slice>
            <filter src_ip="210.249.170.60" dst_ip="161.138.25.25" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.584190,1.752930,503,1 0 0 1 1 1 1 1 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="161.138.187.178" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.728090,1.567810,999,0 0 0 1 1 0 1 1 0 1 1 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="161.138.94.55" src_port="53"/>
            <filter dst_ip="211.151.63.141" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.899290,1.567760,503,1 0 0 1 0 0 1 1 0 1 1 1,alphflHTTP">
        <slice>
            <filter src_ip="28.183.186.64" dst_ip="161.153.167.88" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.908280,1.537620,503,1 1 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="155.107.182.10" src_port="80"/>
            <filter dst_ip="155.107.182.10" src_port="443"/>
            <filter dst_ip="155.107.183.0" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.451170,1.751890,503,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="217.59.253.231" src_port="80"/>
            <filter dst_ip="155.107.180.208" src_port="80"/>
            <filter dst_ip="177.53.249.85" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.844800,1.798710,010,1 1 1 1 1 1 1 1 0 1 1 1,ntscSYNt">
        <slice>
            <filter src_ip="45.160.64.195" src_port="12200"/>
            <filter src_ip="102.75.216.236" src_port="60000" dst_port="23"/>
            <filter src_ip="102.75.216.236" src_port="60000" dst_port="50070"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
