<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.591744,1.528700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="223.184.171.111"/>
        </slice>
        <from usec="0" sec="1430802661"/>
        <to usec="0" sec="1430802663"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="175.19.14.94" dst_ip="155.107.180.245" src_port="32626" dst_port="11392" proto="udp"/>
        </slice>
        <from usec="0" sec="1430802441"/>
        <to usec="0" sec="1430802446"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="161.138.31.157" dst_ip="110.166.229.132" src_port="30163" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1430802355"/>
        <to usec="0" sec="1430802829"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="161.158.234.146" dst_ip="195.150.35.229" src_port="55149" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1430802365"/>
        <to usec="0" sec="1430802368"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="223.184.171.117"/>
        </slice>
        <from usec="0" sec="1430802661"/>
        <to usec="0" sec="1430802663"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="155.107.122.194" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1430802454"/>
        <to usec="0" sec="1430802597"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="210.240.55.81" dst_ip="107.4.250.174" src_port="60138" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1430802587"/>
        <to usec="0" sec="1430802591"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="211.151.53.123" dst_ip="101.9.194.69" src_port="62115" dst_port="4500" proto="udp"/>
        </slice>
        <from usec="0" sec="1430802514"/>
        <to usec="0" sec="1430802525"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="155.107.182.75" dst_ip="144.201.132.78" src_port="54496" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1430802583"/>
        <to usec="0" sec="1430802585"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="19.136.89.180"/>
        </slice>
        <from usec="0" sec="1430802661"/>
        <to usec="0" sec="1430802663"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="161.138.196.237" dst_ip="195.185.178.196" src_port="49731" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1430802592"/>
        <to usec="0" sec="1430802594"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="167.4.107.255" dst_ip="50.190.172.106" src_port="64175" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1430802185"/>
        <to usec="0" sec="1430802850"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="19.136.89.163" dst_ip="155.107.182.213" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1430802496"/>
        <to usec="0" sec="1430802498"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="186.170.156.167" dst_ip="195.150.55.146" src_port="62667" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1430802592"/>
        <to usec="0" sec="1430802594"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="110.166.229.124" dst_ip="155.107.119.207" src_port="80" dst_port="64392" proto="tcp"/>
        </slice>
        <from usec="0" sec="1430802480"/>
        <to usec="0" sec="1430802482"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="161.138.129.36" dst_ip="215.247.149.14" dst_port="81" proto="tcp"/>
        </slice>
        <from usec="0" sec="1430802390"/>
        <to usec="0" sec="1430802874"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="222.183.52.180" dst_ip="155.107.182.123" src_port="80" dst_port="50186" proto="tcp"/>
        </slice>
        <from usec="0" sec="1430802146"/>
        <to usec="0" sec="1430802157"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="210.240.59.215" dst_ip="154.16.0.80" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1430802355"/>
        <to usec="0" sec="1430802820"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="155.107.182.146" dst_ip="26.154.220.31" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1430802357"/>
        <to usec="0" sec="1430802663"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="186.170.128.8" dst_ip="195.150.34.70" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1430802358"/>
        <to usec="0" sec="1430802594"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="28.207.120.242" dst_ip="211.151.63.224" src_port="55722" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1430802586"/>
        <to usec="0" sec="1430802592"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="155.107.182.135" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1430802355"/>
        <to usec="0" sec="1430802373"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="54.39.33.192"/>
        </slice>
        <from usec="0" sec="1430802864"/>
        <to usec="0" sec="1430802867"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="161.138.60.30" dst_ip="222.244.157.140" src_port="60481" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1430802661"/>
        <to usec="0" sec="1430802663"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="51.40.166.168" dst_ip="177.53.171.241" src_port="51957" dst_port="995" proto="tcp"/>
        </slice>
        <from usec="0" sec="1430802544"/>
        <to usec="0" sec="1430802548"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="161.158.240.198"/>
        </slice>
        <from usec="0" sec="1430802053"/>
        <to usec="0" sec="1430802056"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="167.4.130.198" dst_ip="16.14.34.117" src_port="64478" dst_port="443"/>
        </slice>
        <from usec="0" sec="1430802138"/>
        <to usec="0" sec="1430802596"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="161.138.95.230" dst_ip="161.138.95.230" proto="tcp"/>
        </slice>
        <from usec="0" sec="1430802138"/>
        <to usec="0" sec="1430802861"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="161.138.95.212" src_port="51111" proto="tcp"/>
        </slice>
        <from usec="0" sec="1430802551"/>
        <to usec="0" sec="1430802818"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="210.240.169.135"/>
        </slice>
        <from usec="0" sec="1430802381"/>
        <to usec="0" sec="1430802384"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="55.111.222.9"/>
        </slice>
        <from usec="0" sec="1430802860"/>
        <to usec="0" sec="1430802862"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="177.53.188.122"/>
        </slice>
        <from usec="0" sec="1430802586"/>
        <to usec="0" sec="1430802588"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="100.67.127.222" dst_ip="161.138.188.220" dst_port="80"/>
            <filter src_ip="100.67.127.80" dst_ip="161.138.188.220" dst_port="80"/>
            <filter src_ip="29.81.142.160" dst_ip="161.138.188.220" dst_port="80"/>
        </slice>
        <from usec="0" sec="1430802188"/>
        <to usec="0" sec="1430802592"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="90.114.199.56"/>
        </slice>
        <from usec="0" sec="1430802819"/>
        <to usec="0" sec="1430802821"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="167.4.137.19"/>
        </slice>
        <from usec="0" sec="1430802149"/>
        <to usec="0" sec="1430802151"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,502,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="217.83.87.87" dst_ip="211.151.55.23" dst_port="22" proto="tcp"/>
        </slice>
        <from usec="0" sec="1430802452"/>
        <to usec="0" sec="1430802454"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="74.160.169.225" src_port="12200" dst_port="60088"/>
        </slice>
        <from usec="0" sec="1430802113"/>
        <to usec="0" sec="1430802115"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="139.250.91.220"/>
        </slice>
        <from usec="0" sec="1430802441"/>
        <to usec="0" sec="1430802462"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="217.75.12.94"/>
        </slice>
        <from usec="0" sec="1430802796"/>
        <to usec="0" sec="1430802798"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="9.228.251.108"/>
        </slice>
        <from usec="0" sec="1430802380"/>
        <to usec="0" sec="1430802392"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="134.138.188.165"/>
        </slice>
        <from usec="0" sec="1430802516"/>
        <to usec="0" sec="1430802527"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="102.12.179.52"/>
        </slice>
        <from usec="0" sec="1430802519"/>
        <to usec="0" sec="1430802523"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="110.159.20.177" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1430802283"/>
        <to usec="0" sec="1430802293"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.224.235.14"/>
        </slice>
        <from usec="0" sec="1430802002"/>
        <to usec="0" sec="1430802004"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="129.156.233.219" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1430802511"/>
        <to usec="0" sec="1430802534"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="5.135.121.205" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1430802042"/>
        <to usec="0" sec="1430802885"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="14.224.235.14" proto="icmp"/>
        </slice>
        <from usec="0" sec="1430802002"/>
        <to usec="0" sec="1430802004"/>
    </anomaly>
    <anomaly type="notice" value="0.591744,1.528700,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="210.240.35.49"/>
        </slice>
        <from usec="0" sec="1430802505"/>
        <to usec="0" sec="1430802507"/>
    </anomaly>
    <anomaly type="notice" value="0.935333,1.533030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="132.25.156.187" dst_port="23"/>
        </slice>
        <from usec="0" sec="1430802807"/>
        <to usec="0" sec="1430802823"/>
    </anomaly>
    <anomaly type="notice" value="0.935333,1.533030,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="161.138.196.239" src_port="16582"/>
        </slice>
        <from usec="0" sec="1430802127"/>
        <to usec="0" sec="1430802596"/>
    </anomaly>
    <anomaly type="notice" value="0.935333,1.533030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="139.220.25.52" dst_port="23"/>
        </slice>
        <from usec="0" sec="1430802813"/>
        <to usec="0" sec="1430802829"/>
    </anomaly>
    <anomaly type="notice" value="0.935333,1.533030,502,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="207.108.44.205" dst_port="22"/>
        </slice>
        <from usec="0" sec="1430802059"/>
        <to usec="0" sec="1430802061"/>
    </anomaly>
    <anomaly type="notice" value="0.935333,1.533030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="32.108.179.181" dst_port="23"/>
        </slice>
        <from usec="0" sec="1430802343"/>
        <to usec="0" sec="1430802356"/>
    </anomaly>
    <anomaly type="notice" value="0.935333,1.533030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="204.138.252.103" dst_port="23"/>
        </slice>
        <from usec="0" sec="1430802513"/>
        <to usec="0" sec="1430802524"/>
    </anomaly>
    <anomaly type="notice" value="0.935333,1.533030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="209.187.56.142" dst_port="23"/>
        </slice>
        <from usec="0" sec="1430802797"/>
        <to usec="0" sec="1430802820"/>
    </anomaly>
    <anomaly type="notice" value="0.935333,1.533030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="133.204.107.63" dst_port="23"/>
        </slice>
        <from usec="0" sec="1430802831"/>
        <to usec="0" sec="1430802836"/>
    </anomaly>
    <anomaly type="notice" value="0.935333,1.533030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="133.204.120.184" dst_port="23"/>
        </slice>
        <from usec="0" sec="1430802128"/>
        <to usec="0" sec="1430802151"/>
    </anomaly>
    <anomaly type="notice" value="0.935333,1.533030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="203.249.172.118" dst_port="23"/>
        </slice>
        <from usec="0" sec="1430802362"/>
        <to usec="0" sec="1430802373"/>
    </anomaly>
    <anomaly type="notice" value="0.935333,1.533030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.126.15.43" dst_port="23"/>
        </slice>
        <from usec="0" sec="1430802119"/>
        <to usec="0" sec="1430802125"/>
    </anomaly>
    <anomaly type="notice" value="0.935333,1.533030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="208.216.195.48" dst_port="23"/>
        </slice>
        <from usec="0" sec="1430802858"/>
        <to usec="0" sec="1430802875"/>
    </anomaly>
    <anomaly type="notice" value="0.935333,1.533030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="58.13.100.212" dst_port="23"/>
        </slice>
        <from usec="0" sec="1430802842"/>
        <to usec="0" sec="1430802849"/>
    </anomaly>
    <anomaly type="notice" value="0.935333,1.533030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="5.119.187.41" dst_port="23"/>
        </slice>
        <from usec="0" sec="1430802096"/>
        <to usec="0" sec="1430802113"/>
    </anomaly>
    <anomaly type="notice" value="0.935333,1.533030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.33.27.170" dst_port="23"/>
        </slice>
        <from usec="0" sec="1430802651"/>
        <to usec="0" sec="1430802665"/>
    </anomaly>
    <anomaly type="notice" value="0.935333,1.533030,011,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="63.115.29.68" src_port="18350" dst_port="53655"/>
        </slice>
        <from usec="0" sec="1430802819"/>
        <to usec="0" sec="1430802821"/>
    </anomaly>
    <anomaly type="notice" value="0.935333,1.533030,011,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="132.25.156.187" src_port="23"/>
        </slice>
        <from usec="0" sec="1430802807"/>
        <to usec="0" sec="1430802823"/>
    </anomaly>
    <anomaly type="notice" value="0.935333,1.533030,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="44.126.15.43"/>
        </slice>
        <from usec="0" sec="1430802119"/>
        <to usec="0" sec="1430802125"/>
    </anomaly>
    <anomaly type="notice" value="0.935333,1.533030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="203.234.100.80" dst_port="23"/>
        </slice>
        <from usec="0" sec="1430802047"/>
        <to usec="0" sec="1430802156"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="32.125.196.177"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802108"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="161.138.32.33"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802108"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="31.185.45.85"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802108"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="117.90.151.237"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802108"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="210.240.173.153"/>
        </slice>
        <from usec="0" sec="1430802001"/>
        <to usec="0" sec="1430802108"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="167.4.150.53"/>
        </slice>
        <from usec="0" sec="1430802001"/>
        <to usec="0" sec="1430802108"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="141.30.86.60"/>
        </slice>
        <from usec="0" sec="1430802001"/>
        <to usec="0" sec="1430802103"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="154.16.58.34"/>
        </slice>
        <from usec="0" sec="1430802002"/>
        <to usec="0" sec="1430802103"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="217.196.116.183"/>
        </slice>
        <from usec="0" sec="1430802070"/>
        <to usec="0" sec="1430802084"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="222.244.157.173"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802189"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="8.86.227.49"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802198"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="155.107.192.208"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802198"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="107.115.224.164"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802198"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="137.90.32.95"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802196"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,020,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="161.138.24.6"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802197"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="31.185.45.67"/>
        </slice>
        <from usec="0" sec="1430802001"/>
        <to usec="0" sec="1430802196"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="107.252.204.228"/>
        </slice>
        <from usec="0" sec="1430802002"/>
        <to usec="0" sec="1430802198"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="110.166.229.124"/>
        </slice>
        <from usec="0" sec="1430802008"/>
        <to usec="0" sec="1430802174"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="207.241.89.113"/>
        </slice>
        <from usec="0" sec="1430802037"/>
        <to usec="0" sec="1430802131"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="161.138.189.53"/>
        </slice>
        <from usec="0" sec="1430802059"/>
        <to usec="0" sec="1430802198"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="53.209.91.10"/>
        </slice>
        <from usec="0" sec="1430802117"/>
        <to usec="0" sec="1430802128"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="56.170.76.251"/>
        </slice>
        <from usec="0" sec="1430802157"/>
        <to usec="0" sec="1430802198"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="5.60.46.235"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802288"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="167.4.235.151"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802202"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,011,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="138.143.46.121"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802286"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="211.151.53.88"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802266"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="211.151.54.198"/>
        </slice>
        <from usec="0" sec="1430802001"/>
        <to usec="0" sec="1430802274"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="215.185.24.82" src_port="53"/>
        </slice>
        <from usec="0" sec="1430802002"/>
        <to usec="0" sec="1430802273"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="12.232.231.172"/>
        </slice>
        <from usec="0" sec="1430802002"/>
        <to usec="0" sec="1430802558"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="210.240.169.131"/>
        </slice>
        <from usec="0" sec="1430802002"/>
        <to usec="0" sec="1430802277"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,053,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="10.185.178.233"/>
        </slice>
        <from usec="0" sec="1430802003"/>
        <to usec="0" sec="1430802288"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.170.143.67"/>
        </slice>
        <from usec="0" sec="1430802003"/>
        <to usec="0" sec="1430802288"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="155.107.77.52"/>
        </slice>
        <from usec="0" sec="1430802003"/>
        <to usec="0" sec="1430802824"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="186.170.52.69"/>
        </slice>
        <from usec="0" sec="1430802004"/>
        <to usec="0" sec="1430802252"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="217.83.87.86"/>
        </slice>
        <from usec="0" sec="1430802004"/>
        <to usec="0" sec="1430802285"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="207.241.89.251"/>
        </slice>
        <from usec="0" sec="1430802012"/>
        <to usec="0" sec="1430802111"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="57.197.84.144"/>
        </slice>
        <from usec="0" sec="1430802012"/>
        <to usec="0" sec="1430802254"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="155.107.26.95"/>
        </slice>
        <from usec="0" sec="1430802020"/>
        <to usec="0" sec="1430802271"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="223.46.167.10"/>
        </slice>
        <from usec="0" sec="1430802027"/>
        <to usec="0" sec="1430802273"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="103.132.97.209"/>
        </slice>
        <from usec="0" sec="1430802033"/>
        <to usec="0" sec="1430802257"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="56.157.235.119"/>
        </slice>
        <from usec="0" sec="1430802071"/>
        <to usec="0" sec="1430802169"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="52.20.82.141"/>
        </slice>
        <from usec="0" sec="1430802074"/>
        <to usec="0" sec="1430802219"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="134.109.10.97"/>
        </slice>
        <from usec="0" sec="1430802098"/>
        <to usec="0" sec="1430802288"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="56.124.184.124"/>
        </slice>
        <from usec="0" sec="1430802178"/>
        <to usec="0" sec="1430802185"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="180.38.195.248"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802378"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="101.69.219.105"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802378"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="29.104.9.113"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802378"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="212.251.35.107"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802378"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="8.207.201.208"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802378"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="161.138.45.131"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802378"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="167.4.30.203"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802378"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="161.138.33.254"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802828"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="167.4.242.8"/>
        </slice>
        <from usec="0" sec="1430802001"/>
        <to usec="0" sec="1430802336"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="211.151.56.29"/>
        </slice>
        <from usec="0" sec="1430802001"/>
        <to usec="0" sec="1430802378"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="210.248.153.15"/>
        </slice>
        <from usec="0" sec="1430802001"/>
        <to usec="0" sec="1430802376"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="222.43.180.72"/>
        </slice>
        <from usec="0" sec="1430802003"/>
        <to usec="0" sec="1430802378"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="167.4.175.178"/>
        </slice>
        <from usec="0" sec="1430802003"/>
        <to usec="0" sec="1430802374"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="102.123.133.49"/>
        </slice>
        <from usec="0" sec="1430802020"/>
        <to usec="0" sec="1430802369"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="116.245.225.101"/>
        </slice>
        <from usec="0" sec="1430802030"/>
        <to usec="0" sec="1430802280"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="161.138.191.12"/>
        </slice>
        <from usec="0" sec="1430802060"/>
        <to usec="0" sec="1430802376"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="155.107.63.52"/>
        </slice>
        <from usec="0" sec="1430802071"/>
        <to usec="0" sec="1430802352"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="90.41.33.70"/>
        </slice>
        <from usec="0" sec="1430802091"/>
        <to usec="0" sec="1430802350"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="211.151.59.54"/>
        </slice>
        <from usec="0" sec="1430802092"/>
        <to usec="0" sec="1430802204"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="211.151.53.75"/>
        </slice>
        <from usec="0" sec="1430802093"/>
        <to usec="0" sec="1430802378"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="200.241.249.245"/>
        </slice>
        <from usec="0" sec="1430802182"/>
        <to usec="0" sec="1430802235"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="211.53.209.46"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802455"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,010,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="210.240.36.13"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802558"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="210.240.174.133"/>
        </slice>
        <from usec="0" sec="1430802002"/>
        <to usec="0" sec="1430802468"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.157.90.247"/>
        </slice>
        <from usec="0" sec="1430802002"/>
        <to usec="0" sec="1430802468"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.135.139.239"/>
        </slice>
        <from usec="0" sec="1430802094"/>
        <to usec="0" sec="1430802454"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="186.93.121.36"/>
        </slice>
        <from usec="0" sec="1430802209"/>
        <to usec="0" sec="1430802468"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="144.198.76.31"/>
        </slice>
        <from usec="0" sec="1430802276"/>
        <to usec="0" sec="1430802365"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="161.158.185.252"/>
        </slice>
        <from usec="0" sec="1430802417"/>
        <to usec="0" sec="1430802419"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="186.170.52.66"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802541"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="82.80.243.35"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802557"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="166.69.126.1"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802547"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="161.138.24.96"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802557"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="161.138.92.88"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802558"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="211.151.57.167"/>
        </slice>
        <from usec="0" sec="1430802001"/>
        <to usec="0" sec="1430802557"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="167.4.240.198"/>
        </slice>
        <from usec="0" sec="1430802001"/>
        <to usec="0" sec="1430802558"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="155.107.183.8"/>
        </slice>
        <from usec="0" sec="1430802002"/>
        <to usec="0" sec="1430802554"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,504,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="155.107.120.167"/>
        </slice>
        <from usec="0" sec="1430802003"/>
        <to usec="0" sec="1430802546"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="143.11.253.210"/>
        </slice>
        <from usec="0" sec="1430802008"/>
        <to usec="0" sec="1430802549"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="142.89.233.208"/>
        </slice>
        <from usec="0" sec="1430802009"/>
        <to usec="0" sec="1430802549"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="90.9.190.221"/>
        </slice>
        <from usec="0" sec="1430802016"/>
        <to usec="0" sec="1430802510"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="155.107.119.189"/>
        </slice>
        <from usec="0" sec="1430802068"/>
        <to usec="0" sec="1430802557"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,011,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="13.91.96.46"/>
        </slice>
        <from usec="0" sec="1430802297"/>
        <to usec="0" sec="1430802387"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="70.153.212.17"/>
        </slice>
        <from usec="0" sec="1430802436"/>
        <to usec="0" sec="1430802516"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="50.240.85.178"/>
        </slice>
        <from usec="0" sec="1430802440"/>
        <to usec="0" sec="1430802505"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="61.159.200.139"/>
        </slice>
        <from usec="0" sec="1430802546"/>
        <to usec="0" sec="1430802553"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="155.107.182.66"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802648"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="211.151.45.56"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802648"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,504,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="167.4.191.222"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802647"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="31.185.45.65"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802648"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="109.218.8.97"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802647"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="186.170.52.45"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802630"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="23.211.186.87"/>
        </slice>
        <from usec="0" sec="1430802001"/>
        <to usec="0" sec="1430802646"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="147.182.121.255"/>
        </slice>
        <from usec="0" sec="1430802002"/>
        <to usec="0" sec="1430802648"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="211.151.39.246"/>
        </slice>
        <from usec="0" sec="1430802002"/>
        <to usec="0" sec="1430802648"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="154.21.68.77"/>
        </slice>
        <from usec="0" sec="1430802002"/>
        <to usec="0" sec="1430802648"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="102.125.106.107"/>
        </slice>
        <from usec="0" sec="1430802005"/>
        <to usec="0" sec="1430802643"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="19.87.22.90"/>
        </slice>
        <from usec="0" sec="1430802005"/>
        <to usec="0" sec="1430802612"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="155.107.183.137" dst_port="80"/>
        </slice>
        <from usec="0" sec="1430802019"/>
        <to usec="0" sec="1430802648"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="93.135.158.111"/>
        </slice>
        <from usec="0" sec="1430802029"/>
        <to usec="0" sec="1430802638"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="141.129.14.6"/>
        </slice>
        <from usec="0" sec="1430802294"/>
        <to usec="0" sec="1430802639"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="216.164.92.197"/>
        </slice>
        <from usec="0" sec="1430802451"/>
        <to usec="0" sec="1430802545"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="122.118.213.222"/>
        </slice>
        <from usec="0" sec="1430802527"/>
        <to usec="0" sec="1430802641"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="107.26.190.103"/>
        </slice>
        <from usec="0" sec="1430802599"/>
        <to usec="0" sec="1430802648"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="48.33.128.207"/>
        </slice>
        <from usec="0" sec="1430802634"/>
        <to usec="0" sec="1430802636"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="25.152.127.76"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802738"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="167.4.20.41"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802738"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="205.131.131.8"/>
        </slice>
        <from usec="0" sec="1430802001"/>
        <to usec="0" sec="1430802738"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="9.186.97.33"/>
        </slice>
        <from usec="0" sec="1430802001"/>
        <to usec="0" sec="1430802731"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="161.138.110.2"/>
        </slice>
        <from usec="0" sec="1430802002"/>
        <to usec="0" sec="1430802737"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="186.170.191.154"/>
        </slice>
        <from usec="0" sec="1430802003"/>
        <to usec="0" sec="1430802735"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="155.107.123.227"/>
        </slice>
        <from usec="0" sec="1430802003"/>
        <to usec="0" sec="1430802732"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="16.243.30.61"/>
        </slice>
        <from usec="0" sec="1430802004"/>
        <to usec="0" sec="1430802722"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="167.4.107.47"/>
        </slice>
        <from usec="0" sec="1430802006"/>
        <to usec="0" sec="1430802738"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.176.68.35"/>
        </slice>
        <from usec="0" sec="1430802016"/>
        <to usec="0" sec="1430802737"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="161.138.197.153"/>
        </slice>
        <from usec="0" sec="1430802025"/>
        <to usec="0" sec="1430802732"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.170.141.28"/>
        </slice>
        <from usec="0" sec="1430802025"/>
        <to usec="0" sec="1430802738"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.154.253.3"/>
        </slice>
        <from usec="0" sec="1430802130"/>
        <to usec="0" sec="1430802736"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="42.238.107.246"/>
        </slice>
        <from usec="0" sec="1430802328"/>
        <to usec="0" sec="1430802668"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="107.2.42.170"/>
        </slice>
        <from usec="0" sec="1430802498"/>
        <to usec="0" sec="1430802618"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="90.6.207.121"/>
        </slice>
        <from usec="0" sec="1430802502"/>
        <to usec="0" sec="1430802694"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="49.202.34.37"/>
        </slice>
        <from usec="0" sec="1430802591"/>
        <to usec="0" sec="1430802738"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="61.210.182.64"/>
        </slice>
        <from usec="0" sec="1430802660"/>
        <to usec="0" sec="1430802678"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="155.107.183.55"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802813"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="213.6.149.176"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802826"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="211.151.61.1"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802824"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="19.136.89.196"/>
        </slice>
        <from usec="0" sec="1430802003"/>
        <to usec="0" sec="1430802817"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="223.128.59.196"/>
        </slice>
        <from usec="0" sec="1430802008"/>
        <to usec="0" sec="1430802807"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="155.107.89.197"/>
        </slice>
        <from usec="0" sec="1430802012"/>
        <to usec="0" sec="1430802822"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="135.59.249.188"/>
        </slice>
        <from usec="0" sec="1430802031"/>
        <to usec="0" sec="1430802652"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="207.175.93.41"/>
        </slice>
        <from usec="0" sec="1430802568"/>
        <to usec="0" sec="1430802828"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="186.170.63.220"/>
        </slice>
        <from usec="0" sec="1430802604"/>
        <to usec="0" sec="1430802735"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="222.205.27.243"/>
        </slice>
        <from usec="0" sec="1430802702"/>
        <to usec="0" sec="1430802714"/>
    </anomaly>
    <anomaly type="notice" value="0.460200,1.540730,010,0 0 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="130.198.77.37"/>
        </slice>
        <from usec="0" sec="1430802703"/>
        <to usec="0" sec="1430802778"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="102.75.216.237"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802046"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="51.205.46.169" dst_port="8888"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802046"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="102.75.216.238"/>
        </slice>
        <from usec="0" sec="1430802315"/>
        <to usec="0" sec="1430802361"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="102.75.216.239"/>
        </slice>
        <from usec="0" sec="1430802315"/>
        <to usec="0" sec="1430802361"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="130.198.17.110"/>
        </slice>
        <from usec="0" sec="1430802315"/>
        <to usec="0" sec="1430802361"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="102.75.216.237"/>
        </slice>
        <from usec="0" sec="1430802315"/>
        <to usec="0" sec="1430802361"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="102.12.179.52"/>
        </slice>
        <from usec="0" sec="1430802315"/>
        <to usec="0" sec="1430802361"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="102.12.179.53" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1430802315"/>
        <to usec="0" sec="1430802361"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="102.12.179.54"/>
        </slice>
        <from usec="0" sec="1430802315"/>
        <to usec="0" sec="1430802361"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="211.151.62.217" src_port="80"/>
        </slice>
        <from usec="0" sec="1430802315"/>
        <to usec="0" sec="1430802361"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="217.59.254.76" src_port="80"/>
        </slice>
        <from usec="0" sec="1430802315"/>
        <to usec="0" sec="1430802361"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="165.21.67.227" src_port="80"/>
        </slice>
        <from usec="0" sec="1430802315"/>
        <to usec="0" sec="1430802361"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="203.234.100.80" dst_port="23"/>
        </slice>
        <from usec="0" sec="1430802315"/>
        <to usec="0" sec="1430802361"/>
    </anomaly>
    <anomaly type="notice" value="0.615594,1.536810,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="217.57.244.193" dst_port="123"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802378"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="51.205.46.169" src_port="58676" dst_port="8888"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="102.75.216.238"/>
        </slice>
        <from usec="0" sec="1430802540"/>
        <to usec="0" sec="1430802586"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="210.248.142.97" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802585"/>
        <to usec="0" sec="1430802631"/>
    </anomaly>
    <anomaly type="notice" value="0.938948,1.541910,503,1 0 0 1 0 0 1 1 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="211.151.62.217" dst_port="80"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802901"/>
    </anomaly>
    <anomaly type="notice" value="0.911455,1.507260,503,0 0 0 1 0 0 1 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="211.151.55.43" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="210.240.35.51" src_port="53"/>
            <filter dst_ip="210.240.35.51" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802585"/>
        <to usec="0" sec="1430802631"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="210.240.39.141" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802585"/>
        <to usec="0" sec="1430802631"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="211.151.56.40" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802585"/>
        <to usec="0" sec="1430802631"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="211.151.56.56"/>
        </slice>
        <from usec="0" sec="1430802585"/>
        <to usec="0" sec="1430802631"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="211.151.57.48"/>
        </slice>
        <from usec="0" sec="1430802585"/>
        <to usec="0" sec="1430802631"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="177.53.207.109" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802585"/>
        <to usec="0" sec="1430802631"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="177.53.37.175"/>
        </slice>
        <from usec="0" sec="1430802585"/>
        <to usec="0" sec="1430802631"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="211.151.57.5" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802585"/>
        <to usec="0" sec="1430802631"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="177.53.184.122" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802585"/>
        <to usec="0" sec="1430802631"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="130.198.77.59"/>
        </slice>
        <from usec="0" sec="1430802585"/>
        <to usec="0" sec="1430802631"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="211.151.63.251"/>
        </slice>
        <from usec="0" sec="1430802585"/>
        <to usec="0" sec="1430802631"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="210.240.172.85"/>
        </slice>
        <from usec="0" sec="1430802585"/>
        <to usec="0" sec="1430802631"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="210.240.172.94"/>
        </slice>
        <from usec="0" sec="1430802585"/>
        <to usec="0" sec="1430802631"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="16.139.233.170"/>
        </slice>
        <from usec="0" sec="1430802810"/>
        <to usec="0" sec="1430802856"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="130.198.17.112"/>
        </slice>
        <from usec="0" sec="1430802810"/>
        <to usec="0" sec="1430802856"/>
    </anomaly>
    <anomaly type="notice" value="0.581331,1.558230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="211.151.39.252" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802855"/>
        <to usec="0" sec="1430802901"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,010,0 0 0 0 0 0 1 1 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="102.75.216.236" src_port="60000" dst_port="23"/>
            <filter src_ip="102.75.216.236" src_port="60000" dst_port="50070"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802046"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="167.4.51.203" src_port="53"/>
            <filter dst_ip="167.4.51.203" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="167.4.140.123" src_port="53"/>
            <filter dst_ip="167.4.140.123" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="2.26.118.45" dst_ip="167.4.184.173" src_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="210.248.142.97" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,503,0 0 0 0 0 0 1 1 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="155.107.79.141" dst_ip="132.245.221.30" dst_port="80"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="177.53.254.121" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.837995,1.575030,503,0 0 0 1 0 0 1 1 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="177.53.190.123" src_port="80"/>
        </slice>
        <from usec="0" sec="1430802017"/>
        <to usec="0" sec="1430802702"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="210.240.35.54" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802631"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="210.240.35.51" src_port="53"/>
            <filter dst_ip="210.240.35.51" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="161.138.92.88" src_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="155.107.67.229" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="211.151.39.171" dst_port="26123"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802631"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,010,0 0 0 0 0 0 1 1 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="46.130.128.202" dst_ip="161.138.187.233" src_port="80"/>
            <filter src_ip="46.130.129.162" dst_ip="161.138.187.233" src_port="80"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="210.240.39.141" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="210.248.170.222" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="155.107.182.179" dst_ip="70.154.38.83" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,503,0 0 0 0 0 0 1 1 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="177.53.249.109" src_port="80"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="211.151.56.40" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="210.240.52.209" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,020,0 0 0 0 0 0 1 1 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="203.234.100.80"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802631"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="155.107.119.116" dst_port="34861"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="155.107.123.201" dst_port="19835"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="177.53.124.239" src_port="1863" dst_port="1863"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802631"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="211.151.56.62" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802631"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="211.151.56.58" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802631"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="211.151.56.56" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,020,0 0 0 0 0 0 1 1 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="102.75.216.238"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="177.53.132.108" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,020,0 0 0 0 0 0 1 1 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="102.75.216.239"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,020,0 0 0 0 0 0 1 1 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="102.75.216.236"/>
        </slice>
        <from usec="0" sec="1430802315"/>
        <to usec="0" sec="1430802631"/>
    </anomaly>
    <anomaly type="notice" value="0.837995,1.575030,020,0 0 0 1 0 0 1 1 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="130.198.17.110"/>
        </slice>
        <from usec="0" sec="1430802000"/>
        <to usec="0" sec="1430802737"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,020,0 0 0 0 0 0 1 1 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="102.75.216.237"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802631"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="177.53.221.66" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="211.151.57.48" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="161.138.32.33" dst_port="6881"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802631"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="177.53.207.109" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="177.53.253.39" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="177.53.132.95" dst_port="6881"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802631"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="177.53.215.200" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="177.53.37.175" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,010,0 0 0 0 0 0 1 1 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="46.130.129.162" dst_ip="177.102.14.231" src_port="80"/>
            <filter src_ip="46.130.128.202" dst_ip="177.102.14.231" src_port="80"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,020,0 0 0 0 0 0 1 1 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="130.198.17.79"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="177.53.10.33" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,503,0 0 0 0 0 0 1 1 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="177.53.39.44" src_port="80"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="161.138.94.100" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="210.240.34.119" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="211.151.57.5" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.837995,1.575030,020,0 0 0 1 0 0 1 1 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="102.21.136.240"/>
        </slice>
        <from usec="0" sec="1430802004"/>
        <to usec="0" sec="1430802901"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,020,0 0 0 0 0 0 1 1 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="102.12.179.53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802631"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="177.53.184.122" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="177.53.184.123" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="177.53.184.118" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="155.107.219.166" dst_port="6881"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802631"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="177.53.28.242" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="161.138.72.48" dst_port="6881"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802631"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,010,0 0 0 0 0 0 1 1 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="46.130.128.202" dst_ip="177.102.255.167" src_port="80"/>
            <filter src_ip="46.130.129.162" dst_ip="177.102.255.167" src_port="80"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="211.151.61.122" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,010,0 0 0 0 0 0 1 1 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="46.130.129.162" dst_ip="177.102.54.168" src_port="80"/>
            <filter src_ip="46.130.128.202" dst_ip="177.102.54.168" src_port="80"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="211.151.63.251" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.916849,1.563260,503,1 0 0 0 0 0 1 1 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="177.53.169.242" src_port="80"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802663"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,010,0 0 0 0 0 0 1 1 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="46.130.129.162" dst_ip="210.240.32.186" src_port="80"/>
            <filter src_ip="46.130.128.202" dst_ip="210.240.32.186" src_port="80"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="177.53.184.63" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="177.53.186.183" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="210.240.172.85" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.813157,1.595930,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="210.240.172.94" dst_port="53"/>
        </slice>
        <from usec="0" sec="1430802405"/>
        <to usec="0" sec="1430802451"/>
    </anomaly>
    <anomaly type="notice" value="0.789029,1.533030,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="62.119.48.69"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789029,1.533030,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="161.39.140.23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789029,1.533030,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="161.138.187.39"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789029,1.533030,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="155.107.180.193" dst_ip="82.80.253.193" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789029,1.533030,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="116.16.160.72"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789029,1.533030,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="117.190.204.171"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789029,1.533030,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="102.183.180.148"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789029,1.533030,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="29.250.7.238"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789029,1.533030,502,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="5.229.121.228"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789029,1.533030,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="93.20.224.248" dst_ip="161.138.110.2"/>
            <filter src_ip="93.20.224.248" src_port="80"/>
            <filter dst_ip="161.138.110.2" src_port="80"/>
            <filter dst_ip="161.138.110.2" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789029,1.533030,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="161.138.95.209" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789029,1.533030,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="51.30.169.58" dst_ip="177.53.198.212"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789029,1.533030,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="155.107.177.220" src_port="80"/>
            <filter src_ip="90.115.25.17" dst_ip="155.107.177.220" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789029,1.533030,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="155.107.232.147" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789029,1.533030,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="132.242.113.53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.789029,1.533030,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="222.244.157.173"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.895519,1.498990,503,1 0 0 0 0 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="210.248.145.107" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.895519,1.498990,504,1 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="167.4.248.108" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.895519,1.498990,503,1 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="155.107.183.32" dst_ip="24.229.100.229" src_port="59499" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
