<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="194.162.215.27" dst_ip="138.159.22.123" src_port="443" dst_port="50667" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566991"/>
        <to usec="0" sec="1433567699"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="138.159.198.90" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567142"/>
        <to usec="0" sec="1433567671"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="174.41.44.153" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566905"/>
        <to usec="0" sec="1433567497"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="218.185.20.114" dst_ip="184.186.158.166" src_port="12340" dst_port="56722" proto="udp"/>
        </slice>
        <from usec="0" sec="1433566932"/>
        <to usec="0" sec="1433566934"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.69.151.53" dst_ip="23.210.62.189" src_port="57861" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567037"/>
        <to usec="0" sec="1433567690"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="196.125.81.126" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566885"/>
        <to usec="0" sec="1433567671"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="170.69.121.210"/>
        </slice>
        <from usec="0" sec="1433566835"/>
        <to usec="0" sec="1433566838"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="88.82.117.114"/>
        </slice>
        <from usec="0" sec="1433567497"/>
        <to usec="0" sec="1433567500"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="116.238.124.91" dst_ip="138.159.76.81" src_port="443" dst_port="64090" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567180"/>
        <to usec="0" sec="1433567182"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="11.207.249.91" dst_ip="138.159.88.179" src_port="51809" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566892"/>
        <to usec="0" sec="1433566894"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="194.202.162.114" dst_ip="174.41.44.153" src_port="80" dst_port="28303" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567235"/>
        <to usec="0" sec="1433567236"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="205.29.189.53" dst_ip="174.41.3.188" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567256"/>
        <to usec="0" sec="1433567259"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="88.82.117.97" dst_ip="174.41.122.170" src_port="55055" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567696"/>
        <to usec="0" sec="1433567698"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.69.110.233" dst_ip="116.238.126.135" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566995"/>
        <to usec="0" sec="1433567298"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="38.37.247.70" dst_ip="174.41.166.38" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567462"/>
        <to usec="0" sec="1433567464"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="138.159.21.245" dst_ip="19.80.193.58" src_port="49545" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567571"/>
        <to usec="0" sec="1433567573"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="138.159.137.167" dst_ip="12.44.228.163" src_port="443" dst_port="55586" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567139"/>
        <to usec="0" sec="1433567141"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.202.97.51" dst_ip="138.159.86.69" src_port="443" dst_port="49341" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567662"/>
        <to usec="0" sec="1433567664"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="138.159.23.152" dst_ip="148.109.15.22" src_port="61743" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567097"/>
        <to usec="0" sec="1433567687"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="138.159.22.168" dst_ip="145.92.12.107" src_port="54755" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566983"/>
        <to usec="0" sec="1433567668"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="205.29.203.4" dst_ip="138.159.23.27" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567014"/>
        <to usec="0" sec="1433567021"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.69.226.139" dst_ip="88.74.25.245" src_port="1568" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567247"/>
        <to usec="0" sec="1433567285"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="88.82.117.109"/>
        </slice>
        <from usec="0" sec="1433567697"/>
        <to usec="0" sec="1433567700"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="205.29.128.61" dst_ip="197.2.194.169" src_port="80" dst_port="55713" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567380"/>
        <to usec="0" sec="1433567382"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="8.201.153.117"/>
        </slice>
        <from usec="0" sec="1433567033"/>
        <to usec="0" sec="1433567612"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="170.69.89.132" dst_ip="58.145.158.11" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566955"/>
        <to usec="0" sec="1433566958"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="11.119.35.50" dst_ip="138.159.91.157" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566908"/>
        <to usec="0" sec="1433566911"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="50.192.107.3" dst_ip="138.159.22.42" src_port="80" dst_port="65214" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567273"/>
        <to usec="0" sec="1433567275"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="170.69.137.122"/>
        </slice>
        <from usec="0" sec="1433566843"/>
        <to usec="0" sec="1433566865"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="174.54.152.99"/>
        </slice>
        <from usec="0" sec="1433566967"/>
        <to usec="0" sec="1433567668"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="120.113.239.154" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567086"/>
        <to usec="0" sec="1433567642"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="184.186.181.187"/>
        </slice>
        <from usec="0" sec="1433566955"/>
        <to usec="0" sec="1433567398"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="138.159.68.188" dst_ip="190.255.109.112" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566978"/>
        <to usec="0" sec="1433566980"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,502,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="132.159.58.240"/>
        </slice>
        <from usec="0" sec="1433567456"/>
        <to usec="0" sec="1433567467"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="55.68.245.101" dst_ip="138.159.138.99" src_port="59545" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567348"/>
        <to usec="0" sec="1433567350"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="174.54.207.250" dst_ip="116.238.126.175" src_port="53078" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567002"/>
        <to usec="0" sec="1433567180"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="87.112.253.137"/>
        </slice>
        <from usec="0" sec="1433567011"/>
        <to usec="0" sec="1433567021"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="174.54.96.8" dst_ip="144.173.229.250" src_port="52887" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566842"/>
        <to usec="0" sec="1433567632"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="120.127.207.17" dst_ip="174.225.229.17" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567467"/>
        <to usec="0" sec="1433567469"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,ipv46tun">
        <slice>
            <filter src_ip="178.157.43.131" dst_ip="196.125.87.245"/>
        </slice>
        <from usec="0" sec="1433567579"/>
        <to usec="0" sec="1433567582"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="145.92.12.46" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567412"/>
        <to usec="0" sec="1433567638"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="170.69.156.76" dst_ip="172.117.101.160" src_port="50022" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567608"/>
        <to usec="0" sec="1433567611"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="170.69.52.14" dst_ip="88.82.117.108" src_port="25" dst_port="56498" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566928"/>
        <to usec="0" sec="1433566930"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="184.186.205.190" dst_ip="48.96.3.118" src_port="3919" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567677"/>
        <to usec="0" sec="1433567688"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="138.159.23.175" dst_ip="12.134.95.174" src_port="3324" dst_port="44031" proto="udp"/>
        </slice>
        <from usec="0" sec="1433567345"/>
        <to usec="0" sec="1433567448"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="11.78.86.248"/>
        </slice>
        <from usec="0" sec="1433567651"/>
        <to usec="0" sec="1433567668"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.69.27.190" dst_ip="88.74.16.107" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567081"/>
        <to usec="0" sec="1433567424"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.109.8.95" dst_ip="174.41.38.226" src_port="80" dst_port="51238" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567629"/>
        <to usec="0" sec="1433567637"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="12.130.23.61" dst_ip="138.159.208.213" src_port="5468" dst_port="19497" proto="udp"/>
        </slice>
        <from usec="0" sec="1433567371"/>
        <to usec="0" sec="1433567389"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="56.50.2.138" dst_ip="176.8.179.61" src_port="9909" dst_port="62980" proto="udp"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433566832"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="138.159.23.227" dst_ip="131.227.91.25" src_port="50998" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567326"/>
        <to usec="0" sec="1433567375"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.69.184.230" dst_ip="116.238.126.164" src_port="60661" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566851"/>
        <to usec="0" sec="1433567390"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="138.159.23.226" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567340"/>
        <to usec="0" sec="1433567418"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="145.92.12.111" dst_ip="138.159.23.217" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567668"/>
        <to usec="0" sec="1433567686"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="174.41.9.39" dst_ip="116.238.113.125" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567043"/>
        <to usec="0" sec="1433567677"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="170.69.52.101" dst_ip="88.82.117.190" src_port="25" dst_port="56743" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566818"/>
        <to usec="0" sec="1433566996"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="195.41.216.165" dst_ip="138.159.23.70" src_port="80" dst_port="52289" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566868"/>
        <to usec="0" sec="1433566870"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="145.92.12.107" dst_ip="138.159.22.168" src_port="80" dst_port="54755" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567279"/>
        <to usec="0" sec="1433567698"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="0.139.144.164" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567450"/>
        <to usec="0" sec="1433567634"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="138.159.244.154" src_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567309"/>
        <to usec="0" sec="1433567692"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="138.159.86.69" dst_ip="126.202.97.51" src_port="49341" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567662"/>
        <to usec="0" sec="1433567689"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="170.69.36.228" dst_ip="202.249.219.131" src_port="59443" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567429"/>
        <to usec="0" sec="1433567668"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="197.14.14.68" dst_ip="87.112.253.137" src_port="80" dst_port="54295" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567007"/>
        <to usec="0" sec="1433567009"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="138.159.123.124" dst_ip="140.128.222.17" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566804"/>
        <to usec="0" sec="1433567698"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="138.159.65.164" dst_ip="172.117.101.160" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567230"/>
        <to usec="0" sec="1433567244"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="49.54.237.123" dst_ip="184.186.205.198" src_port="443" dst_port="52347" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566954"/>
        <to usec="0" sec="1433566956"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="184.186.184.6" dst_ip="152.235.25.184" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567507"/>
        <to usec="0" sec="1433567509"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="78.225.68.252" dst_ip="138.159.23.70" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567385"/>
        <to usec="0" sec="1433567701"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="223.108.20.232" dst_ip="174.41.199.233" src_port="80" dst_port="49854" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567697"/>
        <to usec="0" sec="1433567699"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="138.159.21.145" dst_ip="195.202.40.70" src_port="49539" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567319"/>
        <to usec="0" sec="1433567390"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="88.36.245.164" dst_ip="174.41.45.190" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567472"/>
        <to usec="0" sec="1433567485"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="170.69.118.172"/>
        </slice>
        <from usec="0" sec="1433567623"/>
        <to usec="0" sec="1433567629"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="15.247.17.77" dst_ip="197.2.87.35" src_port="62641" dst_port="16000" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567376"/>
        <to usec="0" sec="1433567537"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="193.4.3.216" dst_ip="174.41.109.198" src_port="443" dst_port="59154" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566821"/>
        <to usec="0" sec="1433567008"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="148.109.15.22" dst_ip="138.159.23.152" src_port="80" dst_port="61655" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566958"/>
        <to usec="0" sec="1433566976"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="138.159.21.131" dst_ip="126.197.214.12" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566886"/>
        <to usec="0" sec="1433566892"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="210.176.6.144" dst_ip="176.8.99.208" src_port="4300" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567025"/>
        <to usec="0" sec="1433567700"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="170.69.15.211" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566918"/>
        <to usec="0" sec="1433567396"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="138.159.70.215" dst_ip="213.173.207.62" dst_port="80"/>
        </slice>
        <from usec="0" sec="1433566853"/>
        <to usec="0" sec="1433567276"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,011,1 0 0 0 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="72.35.6.40" dst_ip="138.159.22.136" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567375"/>
        <to usec="0" sec="1433567487"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="40.218.45.108" dst_ip="174.41.44.153" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567694"/>
        <to usec="0" sec="1433567697"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="174.54.218.36" dst_ip="92.198.118.84" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567342"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="138.159.22.217"/>
        </slice>
        <from usec="0" sec="1433566805"/>
        <to usec="0" sec="1433567231"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="170.69.57.68" dst_ip="88.77.229.42" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567227"/>
        <to usec="0" sec="1433567229"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="140.18.139.219" dst_ip="138.159.22.146" src_port="80" dst_port="55142" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566854"/>
        <to usec="0" sec="1433566877"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="92.250.229.149" dst_ip="196.125.90.164" src_port="54874" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567195"/>
        <to usec="0" sec="1433567200"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="174.54.188.38" dst_ip="19.80.193.106" src_port="51721" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566807"/>
        <to usec="0" sec="1433566809"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.52.200.231" dst_ip="197.14.14.114" src_port="32515" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566960"/>
        <to usec="0" sec="1433566962"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="184.186.205.195" dst_ip="223.108.8.11" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566885"/>
        <to usec="0" sec="1433566938"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="195.41.216.181" dst_ip="138.159.23.70" src_port="80" dst_port="52700" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567021"/>
        <to usec="0" sec="1433567033"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="174.54.61.128" dst_ip="203.17.29.150" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567415"/>
        <to usec="0" sec="1433567417"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="197.33.252.211" dst_ip="138.159.85.7" src_port="80" dst_port="59052" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566963"/>
        <to usec="0" sec="1433566964"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="9.69.84.130" dst_ip="138.159.199.237" src_port="443" dst_port="58021" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567672"/>
        <to usec="0" sec="1433567674"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="138.159.22.235" dst_ip="205.240.187.228" src_port="56188" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566810"/>
        <to usec="0" sec="1433567667"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="174.54.217.73" dst_ip="51.185.210.215" src_port="64129" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567675"/>
        <to usec="0" sec="1433567699"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="197.2.197.237" dst_ip="83.43.59.66" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567521"/>
        <to usec="0" sec="1433567523"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="174.54.61.133" dst_ip="131.227.91.8" src_port="60629" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567236"/>
        <to usec="0" sec="1433567430"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="138.159.21.177"/>
        </slice>
        <from usec="0" sec="1433566805"/>
        <to usec="0" sec="1433566945"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="223.108.11.81" dst_ip="138.159.2.240" src_port="443" dst_port="61204" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566956"/>
        <to usec="0" sec="1433566967"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="138.159.21.176" dst_ip="116.238.124.91" src_port="52125" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567090"/>
        <to usec="0" sec="1433567197"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="174.54.61.138" dst_ip="65.85.208.75" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567028"/>
        <to usec="0" sec="1433567700"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.226.156.225" dst_ip="138.159.10.221" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566891"/>
        <to usec="0" sec="1433567006"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="176.14.76.241"/>
        </slice>
        <from usec="0" sec="1433566819"/>
        <to usec="0" sec="1433566822"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="138.159.57.10" dst_ip="38.168.18.172" src_port="80" dst_port="49953" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566945"/>
        <to usec="0" sec="1433567006"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.69.190.215" dst_ip="88.74.103.75" src_port="50738" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566859"/>
        <to usec="0" sec="1433566904"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="138.159.23.217" dst_ip="197.15.47.229" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567267"/>
        <to usec="0" sec="1433567274"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="155.244.108.10" dst_ip="176.8.104.229" src_port="17154" dst_port="17787" proto="udp"/>
        </slice>
        <from usec="0" sec="1433567016"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="195.202.40.70" dst_ip="138.159.21.145" src_port="80" dst_port="49539" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567318"/>
        <to usec="0" sec="1433567321"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="170.69.53.240" dst_ip="25.213.56.136" src_port="35244" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566811"/>
        <to usec="0" sec="1433567698"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="128.40.229.36" dst_ip="184.186.76.182" src_port="80" dst_port="60287" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566812"/>
        <to usec="0" sec="1433566851"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="170.69.78.133" dst_ip="213.173.207.41" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566856"/>
        <to usec="0" sec="1433567168"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="88.82.117.186" dst_ip="174.41.122.170" src_port="48911" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567162"/>
        <to usec="0" sec="1433567165"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="88.82.117.190"/>
        </slice>
        <from usec="0" sec="1433566993"/>
        <to usec="0" sec="1433566996"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="154.174.100.47" dst_ip="174.41.135.42" src_port="48220" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566842"/>
        <to usec="0" sec="1433566851"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="61.194.110.212" dst_ip="138.159.23.66" src_port="80" dst_port="54108" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566846"/>
        <to usec="0" sec="1433566982"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="120.7.83.15" dst_ip="197.2.194.192" src_port="80" dst_port="40444" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567278"/>
        <to usec="0" sec="1433567279"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="196.26.209.79" dst_ip="138.159.22.231" src_port="80" dst_port="49492" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566841"/>
        <to usec="0" sec="1433566843"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="174.54.96.213" dst_ip="49.70.107.209" src_port="50758" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567134"/>
        <to usec="0" sec="1433567137"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.69.134.133" dst_ip="116.42.214.133" src_port="49238" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567140"/>
        <to usec="0" sec="1433567143"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.109.11.138" dst_ip="184.186.254.169" src_port="80" dst_port="54235" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566822"/>
        <to usec="0" sec="1433567692"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="197.2.70.241" dst_ip="126.202.97.51" src_port="61158" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567195"/>
        <to usec="0" sec="1433567197"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="197.2.70.240"/>
        </slice>
        <from usec="0" sec="1433567328"/>
        <to usec="0" sec="1433567357"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="138.159.207.173" dst_ip="131.227.91.15" src_port="50369" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567081"/>
        <to usec="0" sec="1433567103"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="184.186.189.38" dst_ip="116.238.117.195" src_port="53563" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566821"/>
        <to usec="0" sec="1433566823"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="174.54.97.145" dst_ip="19.80.193.106" src_port="65250" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567525"/>
        <to usec="0" sec="1433567685"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="174.54.168.109"/>
        </slice>
        <from usec="0" sec="1433567245"/>
        <to usec="0" sec="1433567248"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="138.159.196.206"/>
        </slice>
        <from usec="0" sec="1433567228"/>
        <to usec="0" sec="1433567231"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="14.137.128.255" dst_ip="176.8.179.61" src_port="31345" dst_port="62980" proto="udp"/>
        </slice>
        <from usec="0" sec="1433567375"/>
        <to usec="0" sec="1433567377"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="138.159.22.5" dst_ip="23.209.12.255" src_port="55854" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567245"/>
        <to usec="0" sec="1433567249"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="138.159.113.124" dst_ip="136.132.85.68" src_port="63615" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567520"/>
        <to usec="0" sec="1433567522"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="223.76.128.237" dst_ip="174.41.138.46" src_port="80" dst_port="54523" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567453"/>
        <to usec="0" sec="1433567455"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="203.24.19.189" dst_ip="197.2.197.246" src_port="38175" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566920"/>
        <to usec="0" sec="1433566922"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="196.137.22.105" dst_ip="138.159.23.231" src_port="27015" dst_port="27005" proto="udp"/>
        </slice>
        <from usec="0" sec="1433567374"/>
        <to usec="0" sec="1433567595"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="174.54.170.88" dst_ip="203.64.61.70" src_port="58869" dst_port="1935" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566821"/>
        <to usec="0" sec="1433567698"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="223.76.128.233" dst_ip="184.186.33.78" src_port="80" dst_port="61120" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567383"/>
        <to usec="0" sec="1433567385"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="14.188.31.206" dst_ip="176.8.179.49" src_port="54650" dst_port="63989" proto="udp"/>
        </slice>
        <from usec="0" sec="1433567460"/>
        <to usec="0" sec="1433567521"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="170.69.25.9" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566807"/>
        <to usec="0" sec="1433566848"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.223.167.138" dst_ip="184.186.147.209" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567221"/>
        <to usec="0" sec="1433567234"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="174.54.246.144" dst_ip="88.53.251.191" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566874"/>
        <to usec="0" sec="1433566877"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="54.83.181.22" dst_ip="138.159.21.163" src_port="443" dst_port="51728" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566892"/>
        <to usec="0" sec="1433566894"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="54.83.178.218" dst_ip="138.159.22.215" src_port="1935" dst_port="63170" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567157"/>
        <to usec="0" sec="1433567527"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="140.18.152.78" dst_ip="174.41.9.113" src_port="12340" dst_port="44728" proto="udp"/>
        </slice>
        <from usec="0" sec="1433567668"/>
        <to usec="0" sec="1433567671"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="174.54.48.204" dst_ip="126.254.29.62" src_port="64340" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567460"/>
        <to usec="0" sec="1433567462"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="54.83.181.31" dst_ip="138.159.21.135" src_port="80" dst_port="61094" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566866"/>
        <to usec="0" sec="1433566868"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.120.69.85" dst_ip="138.159.22.149" src_port="80" dst_port="57436" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567162"/>
        <to usec="0" sec="1433567531"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="203.24.19.137" dst_ip="197.2.197.246" src_port="5204" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566952"/>
        <to usec="0" sec="1433566954"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="83.156.28.56" dst_ip="138.159.137.169" src_port="49927" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567188"/>
        <to usec="0" sec="1433567190"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.120.69.84" dst_ip="138.159.22.168" src_port="80" dst_port="54374" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567161"/>
        <to usec="0" sec="1433567375"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="205.112.16.108" dst_ip="184.186.65.129" src_port="443" dst_port="49226" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567270"/>
        <to usec="0" sec="1433567486"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="88.74.237.74" dst_ip="174.41.224.212" src_port="80" dst_port="50778" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566891"/>
        <to usec="0" sec="1433566896"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="184.186.180.208" dst_ip="116.238.116.171" src_port="4634" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567399"/>
        <to usec="0" sec="1433567695"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="138.159.23.68" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566847"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="149.118.121.12" dst_ip="176.8.179.49" src_port="64810" dst_port="63989" proto="udp"/>
        </slice>
        <from usec="0" sec="1433567374"/>
        <to usec="0" sec="1433567645"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="38.168.18.172" dst_ip="138.159.57.10" src_port="49953" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567161"/>
        <to usec="0" sec="1433567163"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="223.76.128.205" dst_ip="174.41.109.85" src_port="80" dst_port="55062" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567416"/>
        <to usec="0" sec="1433567417"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="11.58.164.177" dst_ip="138.159.244.231" src_port="55496" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567593"/>
        <to usec="0" sec="1433567606"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="40.205.22.216" dst_ip="176.8.179.191" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567155"/>
        <to usec="0" sec="1433567530"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="16.194.108.44" dst_ip="176.8.85.9" src_port="12285" dst_port="12598" proto="udp"/>
        </slice>
        <from usec="0" sec="1433567157"/>
        <to usec="0" sec="1433567514"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.109.11.173" dst_ip="174.41.34.172" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567276"/>
        <to usec="0" sec="1433567280"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="14.201.190.61" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567026"/>
        <to usec="0" sec="1433567209"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="12.134.95.174" dst_ip="138.159.23.175" src_port="44031" dst_port="3324" proto="udp"/>
        </slice>
        <from usec="0" sec="1433566961"/>
        <to usec="0" sec="1433567141"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.52.203.29" dst_ip="197.2.194.169" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567138"/>
        <to usec="0" sec="1433567699"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="138.159.198.133" dst_ip="5.176.115.45" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566837"/>
        <to usec="0" sec="1433567232"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="196.125.90.179" dst_ip="83.28.179.187" src_port="37811" dst_port="31273" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567422"/>
        <to usec="0" sec="1433567445"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,020,1 0 0 0 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="196.125.80.225" dst_ip="223.120.150.167" proto="icmp"/>
        </slice>
        <from usec="0" sec="1433566990"/>
        <to usec="0" sec="1433567639"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="144.173.229.220" dst_ip="138.159.198.90" src_port="80" dst_port="64639" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567320"/>
        <to usec="0" sec="1433567323"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="96.78.169.116" dst_ip="138.159.21.193" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567159"/>
        <to usec="0" sec="1433567161"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="138.159.45.251" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567236"/>
        <to usec="0" sec="1433567629"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="138.159.120.44" dst_ip="145.92.12.43" src_port="50359" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566805"/>
        <to usec="0" sec="1433567698"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="88.71.51.242" dst_ip="138.159.23.149" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567656"/>
        <to usec="0" sec="1433567658"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="14.137.62.231" dst_ip="176.8.179.61" src_port="1046" dst_port="62980" proto="udp"/>
        </slice>
        <from usec="0" sec="1433567677"/>
        <to usec="0" sec="1433567679"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="55.52.82.197" dst_ip="176.8.177.128" src_port="80" dst_port="50383" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567093"/>
        <to usec="0" sec="1433567507"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,020,1 0 0 0 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="116.93.129.171"/>
        </slice>
        <from usec="0" sec="1433567412"/>
        <to usec="0" sec="1433567414"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="208.233.209.165" dst_ip="138.159.137.171" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567079"/>
        <to usec="0" sec="1433567082"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="82.81.82.201" dst_ip="197.2.87.35" src_port="5075" dst_port="5041" proto="udp"/>
        </slice>
        <from usec="0" sec="1433567542"/>
        <to usec="0" sec="1433567570"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="172.117.101.160" dst_ip="138.159.65.164" src_port="80" dst_port="58402" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567238"/>
        <to usec="0" sec="1433567240"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="138.159.138.99" dst_ip="55.68.245.101" src_port="80" dst_port="55558" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567556"/>
        <to usec="0" sec="1433567558"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="128.172.251.102" dst_ip="196.125.90.150" src_port="39794" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567340"/>
        <to usec="0" sec="1433567343"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="218.24.189.198" dst_ip="138.159.23.70" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566990"/>
        <to usec="0" sec="1433566992"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="35.143.225.64" dst_ip="184.186.65.234" src_port="80" dst_port="52145" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567685"/>
        <to usec="0" sec="1433567687"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="11.77.198.16" dst_ip="197.14.14.80" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566946"/>
        <to usec="0" sec="1433566966"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="174.54.61.72" dst_ip="7.229.35.198" src_port="57277" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567028"/>
        <to usec="0" sec="1433567196"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="170.69.212.150"/>
        </slice>
        <from usec="0" sec="1433567196"/>
        <to usec="0" sec="1433567200"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="196.125.90.158" dst_ip="42.121.180.140" src_port="6881" dst_port="58082" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567670"/>
        <to usec="0" sec="1433567672"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="66.234.136.156" dst_ip="138.159.23.76" src_port="80" dst_port="50656" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567291"/>
        <to usec="0" sec="1433567353"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="205.240.187.233" dst_ip="138.159.22.236" src_port="80" dst_port="64749" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566908"/>
        <to usec="0" sec="1433567430"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.223.130.8" dst_ip="174.37.113.218" src_port="53" dst_port="1157" proto="udp"/>
        </slice>
        <from usec="0" sec="1433566827"/>
        <to usec="0" sec="1433567678"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="170.69.53.112"/>
        </slice>
        <from usec="0" sec="1433567267"/>
        <to usec="0" sec="1433567272"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="174.54.232.207" dst_port="443"/>
            <filter dst_ip="116.238.117.196" dst_port="443"/>
        </slice>
        <from usec="0" sec="1433566905"/>
        <to usec="0" sec="1433567662"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="116.238.116.167"/>
        </slice>
        <from usec="0" sec="1433567387"/>
        <to usec="0" sec="1433567644"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,504,1 1 1 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="170.69.78.190" dst_port="443"/>
        </slice>
        <from usec="0" sec="1433566806"/>
        <to usec="0" sec="1433567697"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="138.159.22.229" dst_ip="54.167.196.149" dst_port="80"/>
            <filter src_ip="138.159.22.151" dst_ip="54.167.196.149" dst_port="80"/>
        </slice>
        <from usec="0" sec="1433566958"/>
        <to usec="0" sec="1433567342"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="184.186.245.141" dst_ip="116.238.116.171" src_port="63621" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567484"/>
        <to usec="0" sec="1433567494"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="116.238.124.91"/>
        </slice>
        <from usec="0" sec="1433566975"/>
        <to usec="0" sec="1433566977"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="196.125.82.204" src_port="80" dst_port="123"/>
        </slice>
        <from usec="0" sec="1433567428"/>
        <to usec="0" sec="1433567697"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,999,1 1 1 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="171.189.118.98" dst_port="25"/>
        </slice>
        <from usec="0" sec="1433566802"/>
        <to usec="0" sec="1433567653"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="174.41.177.19"/>
        </slice>
        <from usec="0" sec="1433566957"/>
        <to usec="0" sec="1433566959"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="197.2.197.237"/>
        </slice>
        <from usec="0" sec="1433567093"/>
        <to usec="0" sec="1433567096"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="138.159.151.24"/>
        </slice>
        <from usec="0" sec="1433566976"/>
        <to usec="0" sec="1433566979"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,503,1 1 1 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="170.69.150.89" dst_port="80"/>
            <filter dst_ip="202.226.156.225" dst_port="80"/>
        </slice>
        <from usec="0" sec="1433566804"/>
        <to usec="0" sec="1433567700"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,503,1 1 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="174.54.170.88" dst_ip="203.64.62.19" src_port="64564" dst_port="80"/>
            <filter src_ip="174.54.168.237" dst_ip="203.64.62.19" src_port="56931" dst_port="80"/>
        </slice>
        <from usec="0" sec="1433566820"/>
        <to usec="0" sec="1433567292"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,999,1 1 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="197.14.14.114" src_port="80"/>
            <filter dst_ip="197.14.14.114" dst_port="25"/>
        </slice>
        <from usec="0" sec="1433567123"/>
        <to usec="0" sec="1433567544"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,502,1 1 1 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="146.9.32.0" dst_port="22"/>
            <filter src_ip="214.12.121.56" dst_ip="197.2.197.246" dst_port="22"/>
        </slice>
        <from usec="0" sec="1433566970"/>
        <to usec="0" sec="1433567389"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="174.41.122.170"/>
        </slice>
        <from usec="0" sec="1433567230"/>
        <to usec="0" sec="1433567390"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="197.14.14.39" dst_ip="197.15.244.33" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567102"/>
        <to usec="0" sec="1433567104"/>
    </anomaly>
    <anomaly type="notice" value="0.573369,1.372660,503,1 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="174.54.156.170" dst_port="80"/>
            <filter src_ip="174.54.156.170" dst_port="443"/>
        </slice>
        <from usec="0" sec="1433566814"/>
        <to usec="0" sec="1433567680"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="176.8.199.209" dst_port="80"/>
        </slice>
        <from usec="0" sec="1433566837"/>
        <to usec="0" sec="1433567038"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="65.255.121.165" src_port="5667" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567401"/>
        <to usec="0" sec="1433567409"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="197.190.91.31" dst_ip="197.2.194.169" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567511"/>
        <to usec="0" sec="1433567650"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="223.76.129.52" dst_ip="138.159.70.215" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567089"/>
        <to usec="0" sec="1433567091"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="170.69.14.179" dst_ip="88.34.30.105" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567039"/>
        <to usec="0" sec="1433567042"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="174.54.96.64"/>
        </slice>
        <from usec="0" sec="1433567621"/>
        <to usec="0" sec="1433567638"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="170.69.193.84"/>
        </slice>
        <from usec="0" sec="1433566942"/>
        <to usec="0" sec="1433566945"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="138.159.22.42" dst_ip="193.219.233.141" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567196"/>
        <to usec="0" sec="1433567348"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="170.69.7.11"/>
        </slice>
        <from usec="0" sec="1433567509"/>
        <to usec="0" sec="1433567512"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="170.69.57.198"/>
        </slice>
        <from usec="0" sec="1433567386"/>
        <to usec="0" sec="1433567389"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="174.54.186.125" dst_ip="126.254.174.35" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566999"/>
        <to usec="0" sec="1433567001"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.80.178.125"/>
        </slice>
        <from usec="0" sec="1433567413"/>
        <to usec="0" sec="1433567416"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="174.54.153.231"/>
        </slice>
        <from usec="0" sec="1433567016"/>
        <to usec="0" sec="1433567019"/>
    </anomaly>
    <anomaly type="notice" value="0.891288,1.455820,999,1 0 0 1 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="197.2.83.42" dst_port="53"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567700"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="138.159.137.169"/>
        </slice>
        <from usec="0" sec="1433567030"/>
        <to usec="0" sec="1433567033"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="211.238.215.30" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567312"/>
        <to usec="0" sec="1433567323"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="40.172.252.166" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567498"/>
        <to usec="0" sec="1433567522"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="151.10.1.54" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567554"/>
        <to usec="0" sec="1433567592"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="209.219.162.142" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566854"/>
        <to usec="0" sec="1433566872"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="219.114.107.91" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567184"/>
        <to usec="0" sec="1433567199"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="108.216.13.242" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567641"/>
        <to usec="0" sec="1433567650"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="210.143.96.4" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567263"/>
        <to usec="0" sec="1433567271"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.224.107.83" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566895"/>
        <to usec="0" sec="1433566910"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="153.160.125.230" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566976"/>
        <to usec="0" sec="1433566978"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="108.8.207.243" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567244"/>
        <to usec="0" sec="1433567261"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="9.19.66.216" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567575"/>
        <to usec="0" sec="1433567587"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="148.99.154.102" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566866"/>
        <to usec="0" sec="1433566873"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.92.29.4" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567206"/>
        <to usec="0" sec="1433567225"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="153.146.201.103" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567099"/>
        <to usec="0" sec="1433567111"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="16.195.28.119" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433566836"/>
        <to usec="0" sec="1433566839"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="146.211.92.172" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567219"/>
        <to usec="0" sec="1433567238"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="199.102.204.88" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567490"/>
        <to usec="0" sec="1433567502"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="72.198.192.129" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567162"/>
        <to usec="0" sec="1433567170"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="35.173.216.222"/>
        </slice>
        <from usec="0" sec="1433566978"/>
        <to usec="0" sec="1433566992"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.74.15.155" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1433567290"/>
        <to usec="0" sec="1433567305"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="170.69.193.21"/>
        </slice>
        <from usec="0" sec="1433566944"/>
        <to usec="0" sec="1433566946"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,020,1 0 0 0 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="176.111.248.170"/>
        </slice>
        <from usec="0" sec="1433567098"/>
        <to usec="0" sec="1433567100"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="138.159.67.218"/>
        </slice>
        <from usec="0" sec="1433567478"/>
        <to usec="0" sec="1433567481"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="8.179.166.242"/>
        </slice>
        <from usec="0" sec="1433567380"/>
        <to usec="0" sec="1433567382"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="153.187.184.224"/>
        </slice>
        <from usec="0" sec="1433567675"/>
        <to usec="0" sec="1433567677"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="75.207.166.96" proto="icmp"/>
        </slice>
        <from usec="0" sec="1433567268"/>
        <to usec="0" sec="1433567270"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="209.143.139.136" proto="icmp"/>
        </slice>
        <from usec="0" sec="1433567669"/>
        <to usec="0" sec="1433567670"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="1.241.61.74" dst_port="80" proto="icmp"/>
        </slice>
        <from usec="0" sec="1433567236"/>
        <to usec="0" sec="1433567239"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="108.216.13.242" proto="icmp"/>
        </slice>
        <from usec="0" sec="1433567641"/>
        <to usec="0" sec="1433567644"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,020,1 0 0 0 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="4.49.4.134"/>
        </slice>
        <from usec="0" sec="1433567691"/>
        <to usec="0" sec="1433567692"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="16.195.28.119" proto="icmp"/>
        </slice>
        <from usec="0" sec="1433566838"/>
        <to usec="0" sec="1433566839"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="15.212.95.252"/>
        </slice>
        <from usec="0" sec="1433567166"/>
        <to usec="0" sec="1433567168"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="170.69.218.96"/>
        </slice>
        <from usec="0" sec="1433567169"/>
        <to usec="0" sec="1433567172"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="138.159.137.171"/>
        </slice>
        <from usec="0" sec="1433566973"/>
        <to usec="0" sec="1433566976"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="3.30.47.6" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567345"/>
        <to usec="0" sec="1433567365"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="38.120.17.36" dst_ip="138.159.22.59" src_port="80" dst_port="54894"/>
        </slice>
        <from usec="0" sec="1433566938"/>
        <to usec="0" sec="1433567700"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,503,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="138.159.16.192" dst_port="80"/>
        </slice>
        <from usec="0" sec="1433566833"/>
        <to usec="0" sec="1433567700"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="200.38.97.160" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567069"/>
        <to usec="0" sec="1433567082"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="35.64.26.31" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566984"/>
        <to usec="0" sec="1433567001"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="196.125.82.204" src_port="123" dst_port="80"/>
        </slice>
        <from usec="0" sec="1433566806"/>
        <to usec="0" sec="1433567700"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="138.159.137.169" dst_ip="214.172.214.45" src_port="80"/>
        </slice>
        <from usec="0" sec="1433567498"/>
        <to usec="0" sec="1433567502"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="35.106.230.211" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567659"/>
        <to usec="0" sec="1433567670"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="7.128.17.186" dst_ip="176.8.24.161" src_port="80"/>
        </slice>
        <from usec="0" sec="1433567009"/>
        <to usec="0" sec="1433567011"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="138.159.21.193" dst_ip="54.167.196.177" dst_port="80"/>
        </slice>
        <from usec="0" sec="1433567342"/>
        <to usec="0" sec="1433567665"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,502,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="208.118.107.59" dst_port="22"/>
        </slice>
        <from usec="0" sec="1433567506"/>
        <to usec="0" sec="1433567513"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="170.69.102.146" dst_ip="55.52.184.62" src_port="49796" dst_port="80"/>
        </slice>
        <from usec="0" sec="1433566807"/>
        <to usec="0" sec="1433567700"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="92.197.89.203" dst_ip="176.8.177.239" src_port="80"/>
        </slice>
        <from usec="0" sec="1433567199"/>
        <to usec="0" sec="1433567364"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,504,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.69.184.235" dst_ip="223.91.1.249" src_port="37043" dst_port="443"/>
        </slice>
        <from usec="0" sec="1433566808"/>
        <to usec="0" sec="1433567700"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,901,1 1 0 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="176.14.76.206" dst_ip="184.186.134.245" dst_port="80"/>
            <filter src_ip="176.14.76.206" dst_ip="184.186.134.241" dst_port="80"/>
        </slice>
        <from usec="0" sec="1433567657"/>
        <to usec="0" sec="1433567660"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="138.159.21.135" dst_ip="88.81.47.195" src_port="57823" dst_port="443"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567698"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="108.9.31.190" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566952"/>
        <to usec="0" sec="1433566967"/>
    </anomaly>
    <anomaly type="notice" value="0.709441,1.426620,504,1 0 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="223.108.11.88" dst_ip="174.41.159.88" src_port="443" dst_port="54876"/>
        </slice>
        <from usec="0" sec="1433567019"/>
        <to usec="0" sec="1433567466"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="197.2.87.35" dst_ip="82.81.82.201" src_port="5041" dst_port="5075"/>
        </slice>
        <from usec="0" sec="1433567179"/>
        <to usec="0" sec="1433567691"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="88.82.117.187" dst_ip="171.189.118.98" src_port="53943" dst_port="25"/>
            <filter src_ip="88.82.117.187" dst_ip="171.189.118.98" src_port="53213" dst_port="25"/>
        </slice>
        <from usec="0" sec="1433567128"/>
        <to usec="0" sec="1433567270"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,504,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="0.139.25.191" dst_ip="196.125.83.155" src_port="54788" dst_port="443"/>
        </slice>
        <from usec="0" sec="1433567230"/>
        <to usec="0" sec="1433567291"/>
    </anomaly>
    <anomaly type="notice" value="0.895459,1.462920,503,1 1 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="176.8.178.95"/>
        </slice>
        <from usec="0" sec="1433566895"/>
        <to usec="0" sec="1433567548"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="66.220.16.155" dst_ip="197.2.70.145" src_port="443" dst_port="63170"/>
        </slice>
        <from usec="0" sec="1433567575"/>
        <to usec="0" sec="1433567587"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.120.69.103" dst_ip="138.159.22.149" src_port="80" dst_port="57329"/>
        </slice>
        <from usec="0" sec="1433566962"/>
        <to usec="0" sec="1433567539"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="197.15.95.193" dst_ip="197.2.194.50" src_port="80" dst_port="58908"/>
            <filter src_ip="197.15.95.193" dst_ip="197.2.194.50" src_port="80" dst_port="57513"/>
            <filter src_ip="197.15.95.193" dst_ip="197.2.194.50" src_port="80" dst_port="40890"/>
            <filter src_ip="197.15.95.193" dst_ip="197.2.194.50" src_port="80" dst_port="34687"/>
            <filter src_ip="197.15.95.193" dst_ip="197.2.194.50" src_port="80" dst_port="30934"/>
        </slice>
        <from usec="0" sec="1433566867"/>
        <to usec="0" sec="1433566869"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.229.161.152" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566841"/>
        <to usec="0" sec="1433566854"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="199.55.67.244" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567181"/>
        <to usec="0" sec="1433567186"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="138.159.22.59" dst_ip="38.120.17.36" src_port="54894" dst_port="80"/>
        </slice>
        <from usec="0" sec="1433566807"/>
        <to usec="0" sec="1433567700"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="174.54.245.249" dst_ip="84.216.206.212" src_port="60309" dst_port="80"/>
        </slice>
        <from usec="0" sec="1433566975"/>
        <to usec="0" sec="1433566977"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="138.159.2.240" dst_ip="223.108.11.81" src_port="61211" dst_port="443"/>
            <filter src_ip="138.159.2.240" dst_ip="223.108.11.81" src_port="61205" dst_port="443"/>
            <filter src_ip="138.159.2.240" dst_ip="223.108.11.81" src_port="61204" dst_port="443"/>
            <filter src_ip="138.159.2.240" dst_ip="62.195.77.61" src_port="64856" dst_port="80"/>
        </slice>
        <from usec="0" sec="1433566955"/>
        <to usec="0" sec="1433566977"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.100.244.242" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567685"/>
        <to usec="0" sec="1433567699"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="138.159.76.183" dst_ip="116.238.124.91" src_port="49877" dst_port="443"/>
            <filter src_ip="138.159.76.183" dst_ip="116.238.124.91" src_port="49876" dst_port="443"/>
            <filter src_ip="138.159.76.183" dst_ip="116.238.124.91" src_port="49875" dst_port="443"/>
        </slice>
        <from usec="0" sec="1433567623"/>
        <to usec="0" sec="1433567639"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="197.2.70.145" dst_ip="66.220.16.155" dst_port="443"/>
        </slice>
        <from usec="0" sec="1433566802"/>
        <to usec="0" sec="1433567700"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="138.159.22.123" dst_ip="194.162.215.27" src_port="50667" dst_port="443"/>
        </slice>
        <from usec="0" sec="1433566806"/>
        <to usec="0" sec="1433567698"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="184.186.158.166" dst_ip="116.238.116.171" src_port="64566" dst_port="443"/>
        </slice>
        <from usec="0" sec="1433566804"/>
        <to usec="0" sec="1433566814"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="213.179.119.195" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567676"/>
        <to usec="0" sec="1433567680"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="159.124.195.177" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567114"/>
        <to usec="0" sec="1433567127"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="218.24.189.197" dst_ip="138.159.23.70" src_port="80" dst_port="52613"/>
        </slice>
        <from usec="0" sec="1433566997"/>
        <to usec="0" sec="1433566999"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="152.93.89.165" dst_ip="138.159.70.215" src_port="80"/>
        </slice>
        <from usec="0" sec="1433566972"/>
        <to usec="0" sec="1433566974"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="205.240.187.228" dst_ip="138.159.22.235" src_port="80" dst_port="56188"/>
        </slice>
        <from usec="0" sec="1433567092"/>
        <to usec="0" sec="1433567117"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.144.98.163" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567249"/>
        <to usec="0" sec="1433567264"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.14.76.250" dst_ip="174.41.135.42" src_port="22607" dst_port="80"/>
        </slice>
        <from usec="0" sec="1433566937"/>
        <to usec="0" sec="1433566940"/>
    </anomaly>
    <anomaly type="notice" value="0.391232,1.365940,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="174.54.170.88" dst_ip="203.64.62.19" src_port="64564" dst_port="80"/>
            <filter src_ip="174.54.168.237" dst_ip="203.64.62.19" src_port="56931" dst_port="80"/>
        </slice>
        <from usec="0" sec="1433566871"/>
        <to usec="0" sec="1433567317"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.26.156.238" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567692"/>
        <to usec="0" sec="1433567700"/>
    </anomaly>
    <anomaly type="notice" value="0.715469,1.386830,504,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_port="443"/>
            <filter src_ip="138.159.71.85" dst_port="80"/>
        </slice>
        <from usec="0" sec="1433566803"/>
        <to usec="0" sec="1433567269"/>
    </anomaly>
    <anomaly type="notice" value="0.649170,1.419290,504,0 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="174.54.207.250"/>
        </slice>
        <from usec="0" sec="1433567002"/>
        <to usec="0" sec="1433567004"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="197.2.194.50" dst_ip="193.219.233.141" dst_port="443"/>
        </slice>
        <from usec="0" sec="1433566823"/>
        <to usec="0" sec="1433567205"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.230.45.60" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567045"/>
        <to usec="0" sec="1433567063"/>
    </anomaly>
    <anomaly type="notice" value="0.895459,1.462920,999,1 1 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="196.125.70.54" dst_port="53"/>
        </slice>
        <from usec="0" sec="1433566811"/>
        <to usec="0" sec="1433567698"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="15.78.62.197" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566893"/>
        <to usec="0" sec="1433566916"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.118.15.240" src_port="6000" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1433567160"/>
        <to usec="0" sec="1433567165"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="15.183.97.158" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567497"/>
        <to usec="0" sec="1433567511"/>
    </anomaly>
    <anomaly type="notice" value="0.709441,1.426620,010,1 0 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.175.109.240" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567098"/>
        <to usec="0" sec="1433567109"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="35.109.249.234" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567273"/>
        <to usec="0" sec="1433567293"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="215.59.48.1" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567576"/>
        <to usec="0" sec="1433567603"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="155.117.233.160" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566892"/>
        <to usec="0" sec="1433566906"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="148.99.85.53" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567132"/>
        <to usec="0" sec="1433567150"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.230.245.241" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567201"/>
        <to usec="0" sec="1433567208"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="72.198.68.2" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567234"/>
        <to usec="0" sec="1433567249"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.99.229.220" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567497"/>
        <to usec="0" sec="1433567511"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="62.41.195.12" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567652"/>
        <to usec="0" sec="1433567661"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="22.248.0.156" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566897"/>
        <to usec="0" sec="1433566908"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="15.211.54.111" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567008"/>
        <to usec="0" sec="1433567025"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.30.250.39" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567085"/>
        <to usec="0" sec="1433567098"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.12.54.70" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566913"/>
        <to usec="0" sec="1433566927"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="151.101.72.141" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567550"/>
        <to usec="0" sec="1433567566"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.104.55.107" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567338"/>
        <to usec="0" sec="1433567351"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="35.53.193.220" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567239"/>
        <to usec="0" sec="1433567252"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="2.85.232.245" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567695"/>
        <to usec="0" sec="1433567701"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="15.217.149.14" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567399"/>
        <to usec="0" sec="1433567424"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="4.231.213.235" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566887"/>
        <to usec="0" sec="1433566895"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="129.82.237.196" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567378"/>
        <to usec="0" sec="1433567391"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="40.172.150.214" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567091"/>
        <to usec="0" sec="1433567103"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="86.58.193.107" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567344"/>
        <to usec="0" sec="1433567347"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="153.200.139.207" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567385"/>
        <to usec="0" sec="1433567399"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.51.139.171" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567336"/>
        <to usec="0" sec="1433567353"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.113.8.168" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567105"/>
        <to usec="0" sec="1433567117"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="135.82.87.177" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567159"/>
        <to usec="0" sec="1433567175"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="153.143.105.239" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567166"/>
        <to usec="0" sec="1433567173"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.229.155.241" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567340"/>
        <to usec="0" sec="1433567360"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="215.241.1.222" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567297"/>
        <to usec="0" sec="1433567311"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="149.111.128.45" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567268"/>
        <to usec="0" sec="1433567292"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.196.83.42" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567521"/>
        <to usec="0" sec="1433567536"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="18.8.13.91" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567229"/>
        <to usec="0" sec="1433567234"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="13.111.48.23" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567190"/>
        <to usec="0" sec="1433567202"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="108.54.169.120" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567200"/>
        <to usec="0" sec="1433567203"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.112.220.96" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567006"/>
        <to usec="0" sec="1433567025"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.241.61.74" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567232"/>
        <to usec="0" sec="1433567239"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="17.183.86.240" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567078"/>
        <to usec="0" sec="1433567092"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.226.115.225" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567323"/>
        <to usec="0" sec="1433567339"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="61.253.19.175" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566859"/>
        <to usec="0" sec="1433566876"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="146.57.56.250" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566914"/>
        <to usec="0" sec="1433566937"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="15.209.163.105" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567630"/>
        <to usec="0" sec="1433567639"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.25.181.30" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433566809"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.224.203.202" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567693"/>
        <to usec="0" sec="1433567700"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="147.180.96.99" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567019"/>
        <to usec="0" sec="1433567040"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="129.29.116.3" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567616"/>
        <to usec="0" sec="1433567638"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="2.74.68.45" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567298"/>
        <to usec="0" sec="1433567315"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.63.22.29" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567286"/>
        <to usec="0" sec="1433567293"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="22.136.175.238" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566860"/>
        <to usec="0" sec="1433566870"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="155.162.42.21" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566991"/>
        <to usec="0" sec="1433567004"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="36.109.190.228" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566840"/>
        <to usec="0" sec="1433566858"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="106.21.94.170" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567223"/>
        <to usec="0" sec="1433567235"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="7.157.54.165" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567456"/>
        <to usec="0" sec="1433567470"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="108.8.207.58" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567017"/>
        <to usec="0" sec="1433567037"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="108.222.251.42" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566887"/>
        <to usec="0" sec="1433566909"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="59.167.92.177" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567030"/>
        <to usec="0" sec="1433567050"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="158.215.4.202" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567087"/>
        <to usec="0" sec="1433567113"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="148.99.22.83" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566903"/>
        <to usec="0" sec="1433566917"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="16.156.112.142" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567017"/>
        <to usec="0" sec="1433567033"/>
    </anomaly>
    <anomaly type="notice" value="0.715469,1.386830,010,1 1 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="18.185.195.41" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567041"/>
        <to usec="0" sec="1433567065"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="16.158.166.19" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567192"/>
        <to usec="0" sec="1433567205"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="1.124.143.193" dst_port="25"/>
        </slice>
        <from usec="0" sec="1433567389"/>
        <to usec="0" sec="1433567392"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.27.11.164" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566869"/>
        <to usec="0" sec="1433566883"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="0.39.13.52" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566855"/>
        <to usec="0" sec="1433566882"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="108.140.130.174" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567677"/>
        <to usec="0" sec="1433567679"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="35.106.169.156" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567097"/>
        <to usec="0" sec="1433567110"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.243.57.170" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567189"/>
        <to usec="0" sec="1433567204"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="0.207.229.119" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566841"/>
        <to usec="0" sec="1433566864"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="60.78.82.144" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566962"/>
        <to usec="0" sec="1433566983"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="152.47.169.120" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566822"/>
        <to usec="0" sec="1433566843"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="35.106.28.158" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567347"/>
        <to usec="0" sec="1433567365"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.101.1.221" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567254"/>
        <to usec="0" sec="1433567268"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="2.212.149.245" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567509"/>
        <to usec="0" sec="1433567524"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="219.114.105.77" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567658"/>
        <to usec="0" sec="1433567671"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="5.112.221.119" dst_port="1433"/>
            <filter src_ip="5.112.221.119" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567536"/>
        <to usec="0" sec="1433567548"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="129.55.217.144" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567318"/>
        <to usec="0" sec="1433567329"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.117.173.73" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567227"/>
        <to usec="0" sec="1433567244"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.246.214.29" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566812"/>
        <to usec="0" sec="1433566829"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="12.251.224.102" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567276"/>
        <to usec="0" sec="1433567281"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="151.125.229.157" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567193"/>
        <to usec="0" sec="1433567219"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.82.169.156" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567393"/>
        <to usec="0" sec="1433567400"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.50.91.16" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567493"/>
        <to usec="0" sec="1433567504"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="209.143.139.136" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567667"/>
        <to usec="0" sec="1433567670"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="158.229.247.235" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567361"/>
        <to usec="0" sec="1433567388"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="108.14.86.99" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567352"/>
        <to usec="0" sec="1433567356"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="159.126.204.100" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567649"/>
        <to usec="0" sec="1433567667"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.120.13.22" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567586"/>
        <to usec="0" sec="1433567611"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="7.155.249.121" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566890"/>
        <to usec="0" sec="1433566902"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="108.11.247.159" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566990"/>
        <to usec="0" sec="1433567006"/>
    </anomaly>
    <anomaly type="notice" value="0.824012,1.433050,010,1 0 1 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.248.139.243" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566814"/>
        <to usec="0" sec="1433567446"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="6.126.108.18" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567441"/>
        <to usec="0" sec="1433567447"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="152.130.215.119" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566828"/>
        <to usec="0" sec="1433566841"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="9.22.157.186" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567238"/>
        <to usec="0" sec="1433567256"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="72.197.70.28" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567484"/>
        <to usec="0" sec="1433567493"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.128.75.150" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566974"/>
        <to usec="0" sec="1433566984"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="61.246.41.240" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567149"/>
        <to usec="0" sec="1433567163"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="108.11.247.239" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567453"/>
        <to usec="0" sec="1433567468"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.13.130.218" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567029"/>
        <to usec="0" sec="1433567032"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="151.72.112.182" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567551"/>
        <to usec="0" sec="1433567567"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="35.111.46.245" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567622"/>
        <to usec="0" sec="1433567639"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="208.8.33.241" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567695"/>
        <to usec="0" sec="1433567701"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="17.16.94.255" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567129"/>
        <to usec="0" sec="1433567146"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="153.140.204.111" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567272"/>
        <to usec="0" sec="1433567289"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="158.229.247.177" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566961"/>
        <to usec="0" sec="1433566985"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="0.37.41.117" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566963"/>
        <to usec="0" sec="1433566983"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.225.56.131" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566994"/>
        <to usec="0" sec="1433567006"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="8.30.83.170" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566899"/>
        <to usec="0" sec="1433566912"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="108.9.162.41" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567087"/>
        <to usec="0" sec="1433567101"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="129.26.76.22" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567501"/>
        <to usec="0" sec="1433567507"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="63.49.244.204" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567229"/>
        <to usec="0" sec="1433567256"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="35.219.255.180" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566989"/>
        <to usec="0" sec="1433567006"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="35.64.107.131" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566925"/>
        <to usec="0" sec="1433566929"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="35.105.49.61" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566965"/>
        <to usec="0" sec="1433566983"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.112.31.209" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567580"/>
        <to usec="0" sec="1433567587"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="2.73.198.22" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567368"/>
        <to usec="0" sec="1433567383"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="108.11.34.156" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567171"/>
        <to usec="0" sec="1433567192"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="204.180.94.250" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567288"/>
        <to usec="0" sec="1433567310"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="148.96.143.224" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567340"/>
        <to usec="0" sec="1433567353"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="2.79.5.188" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566903"/>
        <to usec="0" sec="1433566919"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="86.37.74.121" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566933"/>
        <to usec="0" sec="1433566944"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="86.54.82.162" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567092"/>
        <to usec="0" sec="1433567117"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="15.10.126.103" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566939"/>
        <to usec="0" sec="1433566944"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="35.118.11.96" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567420"/>
        <to usec="0" sec="1433567440"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="61.230.245.83" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567430"/>
        <to usec="0" sec="1433567446"/>
    </anomaly>
    <anomaly type="notice" value="0.709441,1.426620,020,1 0 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="62.41.195.12"/>
        </slice>
        <from usec="0" sec="1433567652"/>
        <to usec="0" sec="1433567662"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="177.63.22.29"/>
        </slice>
        <from usec="0" sec="1433567286"/>
        <to usec="0" sec="1433567292"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="108.140.130.174"/>
        </slice>
        <from usec="0" sec="1433567677"/>
        <to usec="0" sec="1433567679"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="148.99.154.102"/>
        </slice>
        <from usec="0" sec="1433566864"/>
        <to usec="0" sec="1433566873"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="44.82.169.156"/>
        </slice>
        <from usec="0" sec="1433567397"/>
        <to usec="0" sec="1433567400"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="153.146.201.103"/>
        </slice>
        <from usec="0" sec="1433567099"/>
        <to usec="0" sec="1433567110"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="199.55.67.244"/>
        </slice>
        <from usec="0" sec="1433567181"/>
        <to usec="0" sec="1433567186"/>
    </anomaly>
    <anomaly type="notice" value="0.895459,1.462920,020,1 1 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="46.245.16.194"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="129.26.76.22"/>
        </slice>
        <from usec="0" sec="1433567501"/>
        <to usec="0" sec="1433567506"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="153.143.105.239"/>
        </slice>
        <from usec="0" sec="1433567166"/>
        <to usec="0" sec="1433567173"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,011,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="209.183.144.76" src_port="23"/>
        </slice>
        <from usec="0" sec="1433567549"/>
        <to usec="0" sec="1433567551"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,011,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="129.55.217.144" src_port="23"/>
        </slice>
        <from usec="0" sec="1433567319"/>
        <to usec="0" sec="1433567322"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="42.230.245.241"/>
        </slice>
        <from usec="0" sec="1433567201"/>
        <to usec="0" sec="1433567208"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="4.32.226.231"/>
        </slice>
        <from usec="0" sec="1433567289"/>
        <to usec="0" sec="1433567295"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="26.76.77.171"/>
        </slice>
        <from usec="0" sec="1433567618"/>
        <to usec="0" sec="1433567623"/>
    </anomaly>
    <anomaly type="notice" value="0.649170,1.419290,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="1.241.61.74" dst_port="80" proto="icmp"/>
        </slice>
        <from usec="0" sec="1433567237"/>
        <to usec="0" sec="1433567239"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="101.110.201.136"/>
        </slice>
        <from usec="0" sec="1433566873"/>
        <to usec="0" sec="1433566881"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="155.117.233.160"/>
        </slice>
        <from usec="0" sec="1433566892"/>
        <to usec="0" sec="1433566907"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="65.104.55.107"/>
        </slice>
        <from usec="0" sec="1433567338"/>
        <to usec="0" sec="1433567352"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="83.120.103.6"/>
        </slice>
        <from usec="0" sec="1433567356"/>
        <to usec="0" sec="1433567360"/>
    </anomaly>
    <anomaly type="notice" value="0.579833,1.380190,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="2.70.116.78"/>
        </slice>
        <from usec="0" sec="1433567175"/>
        <to usec="0" sec="1433567182"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="139.63.121.62"/>
        </slice>
        <from usec="0" sec="1433567159"/>
        <to usec="0" sec="1433567517"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="113.13.130.218"/>
        </slice>
        <from usec="0" sec="1433567029"/>
        <to usec="0" sec="1433567032"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="213.179.119.195"/>
        </slice>
        <from usec="0" sec="1433567676"/>
        <to usec="0" sec="1433567680"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="35.64.107.131"/>
        </slice>
        <from usec="0" sec="1433566925"/>
        <to usec="0" sec="1433566929"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="42.228.85.48"/>
        </slice>
        <from usec="0" sec="1433567179"/>
        <to usec="0" sec="1433567183"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,502,1 1 1 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="146.48.196.119" dst_ip="174.41.254.84" src_port="57690" dst_port="22"/>
            <filter src_ip="146.48.196.119" dst_ip="174.41.254.84" src_port="52930" dst_port="22"/>
            <filter src_ip="146.48.196.119" dst_ip="174.41.254.84" src_port="40229" dst_port="22"/>
            <filter src_ip="146.48.196.119" dst_ip="174.41.92.5" src_port="514" dst_port="514"/>
        </slice>
        <from usec="0" sec="1433567071"/>
        <to usec="0" sec="1433567700"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="39.140.114.154" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567604"/>
        <to usec="0" sec="1433567632"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,999,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="26.79.232.97" dst_ip="197.2.197.246" src_port="63690" dst_port="25"/>
        </slice>
        <from usec="0" sec="1433567543"/>
        <to usec="0" sec="1433567546"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="170.69.166.31" dst_port="53"/>
        </slice>
        <from usec="0" sec="1433567227"/>
        <to usec="0" sec="1433567229"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="57.185.157.137" dst_ip="197.2.193.43" src_port="80" dst_port="55358"/>
        </slice>
        <from usec="0" sec="1433567528"/>
        <to usec="0" sec="1433567650"/>
    </anomaly>
    <anomaly type="notice" value="0.649170,1.419290,504,0 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="223.108.11.88" dst_ip="174.41.159.88" src_port="443" dst_port="54876"/>
        </slice>
        <from usec="0" sec="1433567025"/>
        <to usec="0" sec="1433567028"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,502,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="214.12.121.56" dst_port="22"/>
        </slice>
        <from usec="0" sec="1433566802"/>
        <to usec="0" sec="1433567187"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.113.29.245" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567356"/>
        <to usec="0" sec="1433567360"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,503,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="197.15.221.8" dst_ip="138.159.70.215" src_port="80"/>
        </slice>
        <from usec="0" sec="1433566881"/>
        <to usec="0" sec="1433566887"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="62.73.126.17" dst_ip="176.8.210.185" src_port="14451" dst_port="26367"/>
            <filter src_ip="62.73.126.17" dst_ip="176.8.210.185" src_port="14450" dst_port="26352"/>
        </slice>
        <from usec="0" sec="1433567206"/>
        <to usec="0" sec="1433567225"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="35.218.165.159" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567456"/>
        <to usec="0" sec="1433567468"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="65.113.29.245"/>
        </slice>
        <from usec="0" sec="1433567356"/>
        <to usec="0" sec="1433567359"/>
    </anomaly>
    <anomaly type="notice" value="0.649170,1.419290,010,0 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.175.109.240" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567098"/>
        <to usec="0" sec="1433567108"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="75.207.166.96" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567263"/>
        <to usec="0" sec="1433567270"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="0.8.54.58" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567181"/>
        <to usec="0" sec="1433567193"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="215.102.164.142" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566842"/>
        <to usec="0" sec="1433566848"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="159.49.238.118" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567644"/>
        <to usec="0" sec="1433567670"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="18.8.13.91"/>
        </slice>
        <from usec="0" sec="1433567229"/>
        <to usec="0" sec="1433567234"/>
    </anomaly>
    <anomaly type="notice" value="0.828523,1.440270,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="14.128.75.150"/>
        </slice>
        <from usec="0" sec="1433566974"/>
        <to usec="0" sec="1433566984"/>
    </anomaly>
    <anomaly type="notice" value="0.649170,1.419290,020,0 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="62.41.195.12"/>
        </slice>
        <from usec="0" sec="1433567652"/>
        <to usec="0" sec="1433567661"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="197.2.82.90"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433566868"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="174.41.70.45"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433566999"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="203.236.34.152"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433566999"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="84.142.179.144"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433566999"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="88.51.36.225"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433566999"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="51.195.7.21"/>
        </slice>
        <from usec="0" sec="1433566803"/>
        <to usec="0" sec="1433566995"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="176.8.233.197"/>
        </slice>
        <from usec="0" sec="1433566812"/>
        <to usec="0" sec="1433566992"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="6.151.65.57"/>
        </slice>
        <from usec="0" sec="1433566820"/>
        <to usec="0" sec="1433566927"/>
    </anomaly>
    <anomaly type="notice" value="0.573369,1.372660,503,1 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="138.159.22.207" dst_port="80"/>
        </slice>
        <from usec="0" sec="1433566802"/>
        <to usec="0" sec="1433567623"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="144.129.217.41"/>
        </slice>
        <from usec="0" sec="1433566889"/>
        <to usec="0" sec="1433566918"/>
    </anomaly>
    <anomaly type="notice" value="0.573369,1.372660,020,1 0 0 1 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="153.160.125.230"/>
        </slice>
        <from usec="0" sec="1433566964"/>
        <to usec="0" sec="1433566989"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="155.114.112.139"/>
        </slice>
        <from usec="0" sec="1433566888"/>
        <to usec="0" sec="1433567083"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567179"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="176.111.162.127"/>
        </slice>
        <from usec="0" sec="1433566806"/>
        <to usec="0" sec="1433567269"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="90.156.54.11"/>
        </slice>
        <from usec="0" sec="1433566813"/>
        <to usec="0" sec="1433567264"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="88.71.17.20"/>
        </slice>
        <from usec="0" sec="1433566829"/>
        <to usec="0" sec="1433567175"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="145.7.42.138"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567269"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="176.8.239.106"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567242"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="205.150.64.48" dst_ip="196.125.92.177" dst_port="53"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567269"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="131.235.163.1"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567269"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="176.8.176.169"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567269"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="15.3.254.199"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567269"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="126.169.205.186"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567268"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="184.186.184.230"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567248"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="184.186.236.72"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567269"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="184.186.32.122"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567266"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="138.159.208.203"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567268"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="50.185.255.22"/>
        </slice>
        <from usec="0" sec="1433566802"/>
        <to usec="0" sec="1433567244"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="50.185.226.159"/>
        </slice>
        <from usec="0" sec="1433566802"/>
        <to usec="0" sec="1433567447"/>
    </anomaly>
    <anomaly type="notice" value="0.928515,1.446640,503,1 1 1 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="153.98.254.189" src_port="80"/>
        </slice>
        <from usec="0" sec="1433566802"/>
        <to usec="0" sec="1433567611"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="176.8.219.28"/>
        </slice>
        <from usec="0" sec="1433566803"/>
        <to usec="0" sec="1433567184"/>
    </anomaly>
    <anomaly type="notice" value="0.928515,1.446640,503,1 1 1 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="131.203.48.62"/>
            <filter src_ip="197.2.194.169" dst_port="80"/>
        </slice>
        <from usec="0" sec="1433566803"/>
        <to usec="0" sec="1433567700"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="169.161.116.219"/>
        </slice>
        <from usec="0" sec="1433566804"/>
        <to usec="0" sec="1433567253"/>
    </anomaly>
    <anomaly type="notice" value="0.573369,1.372660,503,1 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="174.54.195.16" dst_port="80"/>
        </slice>
        <from usec="0" sec="1433566804"/>
        <to usec="0" sec="1433567688"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="19.80.203.6"/>
        </slice>
        <from usec="0" sec="1433566805"/>
        <to usec="0" sec="1433567268"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="174.41.160.235"/>
        </slice>
        <from usec="0" sec="1433566805"/>
        <to usec="0" sec="1433567268"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="138.159.23.54" src_port="443"/>
            <filter dst_ip="138.159.23.54" src_port="80"/>
        </slice>
        <from usec="0" sec="1433566806"/>
        <to usec="0" sec="1433567160"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="223.79.221.228"/>
        </slice>
        <from usec="0" sec="1433566806"/>
        <to usec="0" sec="1433567264"/>
    </anomaly>
    <anomaly type="notice" value="0.573369,1.372660,020,1 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="196.125.86.38"/>
        </slice>
        <from usec="0" sec="1433566806"/>
        <to usec="0" sec="1433567697"/>
    </anomaly>
    <anomaly type="notice" value="0.573369,1.372660,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="138.159.23.7" dst_ip="66.241.69.82" dst_port="80"/>
        </slice>
        <from usec="0" sec="1433566806"/>
        <to usec="0" sec="1433567660"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="176.8.177.92"/>
        </slice>
        <from usec="0" sec="1433566807"/>
        <to usec="0" sec="1433567248"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="196.170.187.144" dst_ip="196.125.90.29" src_port="53"/>
            <filter src_ip="196.170.187.145" dst_ip="196.125.90.29" src_port="53"/>
        </slice>
        <from usec="0" sec="1433566807"/>
        <to usec="0" sec="1433567259"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="131.238.119.237"/>
        </slice>
        <from usec="0" sec="1433566808"/>
        <to usec="0" sec="1433567266"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="197.15.95.231" dst_ip="138.159.23.119" src_port="80"/>
        </slice>
        <from usec="0" sec="1433566808"/>
        <to usec="0" sec="1433567359"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="174.41.231.255"/>
        </slice>
        <from usec="0" sec="1433566808"/>
        <to usec="0" sec="1433567258"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="174.225.229.9"/>
        </slice>
        <from usec="0" sec="1433566808"/>
        <to usec="0" sec="1433567242"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="176.8.37.193"/>
        </slice>
        <from usec="0" sec="1433566811"/>
        <to usec="0" sec="1433567231"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="207.28.121.246"/>
        </slice>
        <from usec="0" sec="1433566811"/>
        <to usec="0" sec="1433567263"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="197.152.141.194"/>
        </slice>
        <from usec="0" sec="1433566813"/>
        <to usec="0" sec="1433567129"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="184.186.191.83"/>
        </slice>
        <from usec="0" sec="1433566813"/>
        <to usec="0" sec="1433567244"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="126.251.112.81"/>
        </slice>
        <from usec="0" sec="1433566814"/>
        <to usec="0" sec="1433567359"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="131.203.9.110"/>
        </slice>
        <from usec="0" sec="1433566815"/>
        <to usec="0" sec="1433567258"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="16.189.175.58"/>
        </slice>
        <from usec="0" sec="1433566817"/>
        <to usec="0" sec="1433567261"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="174.41.252.187"/>
        </slice>
        <from usec="0" sec="1433566819"/>
        <to usec="0" sec="1433567269"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="126.251.106.126"/>
        </slice>
        <from usec="0" sec="1433566822"/>
        <to usec="0" sec="1433567260"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="138.159.4.48"/>
        </slice>
        <from usec="0" sec="1433566823"/>
        <to usec="0" sec="1433567267"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="138.159.243.49"/>
        </slice>
        <from usec="0" sec="1433566828"/>
        <to usec="0" sec="1433567269"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="176.8.179.6"/>
        </slice>
        <from usec="0" sec="1433566829"/>
        <to usec="0" sec="1433567268"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="65.173.193.134"/>
        </slice>
        <from usec="0" sec="1433566839"/>
        <to usec="0" sec="1433567443"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="38.65.160.79"/>
        </slice>
        <from usec="0" sec="1433566842"/>
        <to usec="0" sec="1433567226"/>
    </anomaly>
    <anomaly type="notice" value="0.891288,1.455820,503,1 0 0 1 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="138.159.22.18" dst_ip="210.76.21.44" dst_port="80"/>
        </slice>
        <from usec="0" sec="1433566847"/>
        <to usec="0" sec="1433567685"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="142.173.232.241"/>
        </slice>
        <from usec="0" sec="1433566850"/>
        <to usec="0" sec="1433567231"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="126.201.244.134"/>
        </slice>
        <from usec="0" sec="1433566880"/>
        <to usec="0" sec="1433567113"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="194.213.223.71"/>
        </slice>
        <from usec="0" sec="1433566892"/>
        <to usec="0" sec="1433567187"/>
    </anomaly>
    <anomaly type="notice" value="0.928515,1.446640,010,1 1 1 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="21.180.133.172" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566907"/>
        <to usec="0" sec="1433567279"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="65.140.240.209"/>
        </slice>
        <from usec="0" sec="1433566914"/>
        <to usec="0" sec="1433567210"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="90.135.38.85"/>
        </slice>
        <from usec="0" sec="1433566953"/>
        <to usec="0" sec="1433567251"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="176.111.255.129"/>
        </slice>
        <from usec="0" sec="1433566959"/>
        <to usec="0" sec="1433567246"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="6.236.10.114"/>
        </slice>
        <from usec="0" sec="1433567016"/>
        <to usec="0" sec="1433567220"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="174.41.134.56"/>
        </slice>
        <from usec="0" sec="1433567093"/>
        <to usec="0" sec="1433567149"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="72.99.84.246"/>
        </slice>
        <from usec="0" sec="1433567098"/>
        <to usec="0" sec="1433567202"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="193.142.181.87"/>
        </slice>
        <from usec="0" sec="1433567099"/>
        <to usec="0" sec="1433567123"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="176.8.176.222"/>
        </slice>
        <from usec="0" sec="1433567100"/>
        <to usec="0" sec="1433567135"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="55.171.39.129"/>
        </slice>
        <from usec="0" sec="1433567105"/>
        <to usec="0" sec="1433567269"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="30.21.151.143"/>
        </slice>
        <from usec="0" sec="1433567132"/>
        <to usec="0" sec="1433567193"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="174.41.9.193"/>
        </slice>
        <from usec="0" sec="1433567132"/>
        <to usec="0" sec="1433567267"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="92.138.208.57"/>
        </slice>
        <from usec="0" sec="1433567147"/>
        <to usec="0" sec="1433567224"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="116.238.116.138"/>
        </slice>
        <from usec="0" sec="1433567155"/>
        <to usec="0" sec="1433567225"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter dst_ip="207.49.97.65"/>
        </slice>
        <from usec="0" sec="1433567156"/>
        <to usec="0" sec="1433567269"/>
    </anomaly>
    <anomaly type="notice" value="0.573369,1.372660,503,1 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="138.159.23.70" dst_port="80"/>
        </slice>
        <from usec="0" sec="1433566808"/>
        <to usec="0" sec="1433567684"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="154.90.145.75"/>
        </slice>
        <from usec="0" sec="1433567195"/>
        <to usec="0" sec="1433567266"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="57.49.57.255"/>
        </slice>
        <from usec="0" sec="1433567205"/>
        <to usec="0" sec="1433567268"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="174.225.130.243"/>
        </slice>
        <from usec="0" sec="1433567239"/>
        <to usec="0" sec="1433567269"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="120.197.72.107"/>
        </slice>
        <from usec="0" sec="1433567250"/>
        <to usec="0" sec="1433567252"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="151.106.158.87"/>
        </slice>
        <from usec="0" sec="1433567263"/>
        <to usec="0" sec="1433567267"/>
    </anomaly>
    <anomaly type="notice" value="0.573369,1.372660,503,1 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="17.92.160.225" dst_ip="176.8.233.147" src_port="80"/>
            <filter src_ip="113.147.127.252" dst_ip="176.8.233.147" src_port="80"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567697"/>
    </anomaly>
    <anomaly type="notice" value="0.573369,1.372660,503,1 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="131.196.48.7" dst_ip="176.8.176.214" src_port="80"/>
            <filter src_ip="131.196.48.169" dst_ip="176.8.176.214" src_port="80"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567426"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="57.89.109.40"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567340"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="196.125.83.74" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567359"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="213.62.220.253"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567359"/>
    </anomaly>
    <anomaly type="notice" value="0.573369,1.372660,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="138.159.22.151" src_port="65195"/>
            <filter src_ip="138.159.22.151" dst_ip="54.167.196.177" dst_port="80"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567359"/>
    </anomaly>
    <anomaly type="notice" value="0.928515,1.446640,010,1 1 1 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.228.85.48" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567298"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="88.112.226.210"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567315"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="140.18.181.208"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567357"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="88.214.16.207"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567358"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="174.41.24.186"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567354"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="90.156.8.49"/>
        </slice>
        <from usec="0" sec="1433566802"/>
        <to usec="0" sec="1433567356"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="126.169.147.90"/>
        </slice>
        <from usec="0" sec="1433566802"/>
        <to usec="0" sec="1433567358"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="19.80.197.108"/>
        </slice>
        <from usec="0" sec="1433566803"/>
        <to usec="0" sec="1433567359"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="126.251.112.151"/>
        </slice>
        <from usec="0" sec="1433566803"/>
        <to usec="0" sec="1433567344"/>
    </anomaly>
    <anomaly type="notice" value="0.573369,1.372660,504,1 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="184.186.186.45" dst_ip="116.238.116.171" dst_port="443"/>
        </slice>
        <from usec="0" sec="1433566803"/>
        <to usec="0" sec="1433567330"/>
    </anomaly>
    <anomaly type="notice" value="0.573369,1.372660,504,1 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="138.159.137.165" dst_port="443"/>
        </slice>
        <from usec="0" sec="1433566803"/>
        <to usec="0" sec="1433567356"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="3.204.96.45"/>
        </slice>
        <from usec="0" sec="1433566805"/>
        <to usec="0" sec="1433567353"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="174.225.9.181"/>
        </slice>
        <from usec="0" sec="1433566805"/>
        <to usec="0" sec="1433567353"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="198.78.105.2"/>
        </slice>
        <from usec="0" sec="1433566806"/>
        <to usec="0" sec="1433567358"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="184.186.205.201"/>
        </slice>
        <from usec="0" sec="1433566806"/>
        <to usec="0" sec="1433567346"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="171.189.124.170" dst_port="53"/>
        </slice>
        <from usec="0" sec="1433566807"/>
        <to usec="0" sec="1433567358"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="120.65.228.212"/>
        </slice>
        <from usec="0" sec="1433566810"/>
        <to usec="0" sec="1433567342"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="184.186.181.40"/>
        </slice>
        <from usec="0" sec="1433566810"/>
        <to usec="0" sec="1433567357"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="174.41.4.5"/>
        </slice>
        <from usec="0" sec="1433566811"/>
        <to usec="0" sec="1433567354"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="176.111.233.112"/>
        </slice>
        <from usec="0" sec="1433566811"/>
        <to usec="0" sec="1433567348"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="184.186.205.199"/>
        </slice>
        <from usec="0" sec="1433566813"/>
        <to usec="0" sec="1433567339"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="184.186.205.210"/>
        </slice>
        <from usec="0" sec="1433566813"/>
        <to usec="0" sec="1433567349"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="174.225.1.130"/>
        </slice>
        <from usec="0" sec="1433566815"/>
        <to usec="0" sec="1433567351"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="184.186.205.253"/>
        </slice>
        <from usec="0" sec="1433566819"/>
        <to usec="0" sec="1433567359"/>
    </anomaly>
    <anomaly type="notice" value="0.928515,1.446640,999,1 1 1 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="170.69.227.120" dst_port="53"/>
            <filter dst_ip="205.228.237.225" dst_port="53"/>
        </slice>
        <from usec="0" sec="1433566821"/>
        <to usec="0" sec="1433567418"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="205.218.11.106"/>
        </slice>
        <from usec="0" sec="1433566823"/>
        <to usec="0" sec="1433567206"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="176.8.219.119"/>
        </slice>
        <from usec="0" sec="1433566824"/>
        <to usec="0" sec="1433567336"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="210.144.26.65"/>
        </slice>
        <from usec="0" sec="1433566830"/>
        <to usec="0" sec="1433567308"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,053,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="82.207.165.248"/>
        </slice>
        <from usec="0" sec="1433566838"/>
        <to usec="0" sec="1433567346"/>
    </anomaly>
    <anomaly type="notice" value="0.715469,1.386830,503,1 1 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="170.69.92.9" dst_port="80"/>
            <filter src_ip="170.69.92.9" dst_port="443"/>
        </slice>
        <from usec="0" sec="1433566857"/>
        <to usec="0" sec="1433567483"/>
    </anomaly>
    <anomaly type="notice" value="0.891288,1.455820,999,1 0 0 1 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="138.159.23.163" dst_ip="14.171.12.175"/>
            <filter src_ip="138.159.23.163" src_port="44044"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567699"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="55.68.245.103"/>
        </slice>
        <from usec="0" sec="1433566865"/>
        <to usec="0" sec="1433567359"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="184.186.158.224"/>
        </slice>
        <from usec="0" sec="1433566989"/>
        <to usec="0" sec="1433567185"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="174.225.85.104"/>
        </slice>
        <from usec="0" sec="1433567000"/>
        <to usec="0" sec="1433567242"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="57.89.96.95"/>
        </slice>
        <from usec="0" sec="1433567021"/>
        <to usec="0" sec="1433567223"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,020,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="8.119.45.92"/>
        </slice>
        <from usec="0" sec="1433567119"/>
        <to usec="0" sec="1433567229"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="86.181.153.96"/>
        </slice>
        <from usec="0" sec="1433567121"/>
        <to usec="0" sec="1433567195"/>
    </anomaly>
    <anomaly type="notice" value="0.573369,1.372660,504,1 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="197.202.42.67" dst_port="443"/>
        </slice>
        <from usec="0" sec="1433566823"/>
        <to usec="0" sec="1433567690"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="184.186.149.213"/>
        </slice>
        <from usec="0" sec="1433567135"/>
        <to usec="0" sec="1433567275"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="145.40.73.244"/>
        </slice>
        <from usec="0" sec="1433567141"/>
        <to usec="0" sec="1433567207"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="145.40.254.171"/>
        </slice>
        <from usec="0" sec="1433567165"/>
        <to usec="0" sec="1433567359"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,020,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="25.213.0.60"/>
        </slice>
        <from usec="0" sec="1433567179"/>
        <to usec="0" sec="1433567220"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="174.54.169.248" dst_port="80"/>
        </slice>
        <from usec="0" sec="1433566804"/>
        <to usec="0" sec="1433567356"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter dst_ip="183.120.103.36"/>
        </slice>
        <from usec="0" sec="1433567196"/>
        <to usec="0" sec="1433567359"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="223.106.130.9"/>
        </slice>
        <from usec="0" sec="1433567201"/>
        <to usec="0" sec="1433567232"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="174.41.11.81"/>
        </slice>
        <from usec="0" sec="1433567244"/>
        <to usec="0" sec="1433567246"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="8.96.2.58"/>
        </slice>
        <from usec="0" sec="1433567256"/>
        <to usec="0" sec="1433567270"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="180.16.104.29"/>
        </slice>
        <from usec="0" sec="1433567277"/>
        <to usec="0" sec="1433567298"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="210.182.194.44"/>
        </slice>
        <from usec="0" sec="1433567312"/>
        <to usec="0" sec="1433567324"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="184.186.238.6"/>
        </slice>
        <from usec="0" sec="1433567321"/>
        <to usec="0" sec="1433567359"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter dst_ip="209.236.204.22"/>
        </slice>
        <from usec="0" sec="1433567343"/>
        <to usec="0" sec="1433567357"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="174.41.166.122"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567446"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="46.72.244.165"/>
        </slice>
        <from usec="0" sec="1433566803"/>
        <to usec="0" sec="1433567420"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="161.6.78.223"/>
        </slice>
        <from usec="0" sec="1433566803"/>
        <to usec="0" sec="1433567447"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="203.64.60.119"/>
        </slice>
        <from usec="0" sec="1433566805"/>
        <to usec="0" sec="1433567446"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="174.41.28.118"/>
        </slice>
        <from usec="0" sec="1433566806"/>
        <to usec="0" sec="1433567448"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="193.219.233.144"/>
        </slice>
        <from usec="0" sec="1433566807"/>
        <to usec="0" sec="1433567448"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="184.186.174.210"/>
        </slice>
        <from usec="0" sec="1433566809"/>
        <to usec="0" sec="1433567446"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="176.8.37.62"/>
        </slice>
        <from usec="0" sec="1433566809"/>
        <to usec="0" sec="1433567396"/>
    </anomaly>
    <anomaly type="notice" value="0.649170,1.419290,010,0 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.248.139.243" dst_port="23"/>
        </slice>
        <from usec="0" sec="1433567314"/>
        <to usec="0" sec="1433567325"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="138.159.21.144" src_port="80"/>
            <filter dst_ip="138.159.21.144" src_port="443"/>
        </slice>
        <from usec="0" sec="1433566815"/>
        <to usec="0" sec="1433567447"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,012,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="153.199.238.129"/>
        </slice>
        <from usec="0" sec="1433566820"/>
        <to usec="0" sec="1433567443"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="88.67.78.164"/>
        </slice>
        <from usec="0" sec="1433566822"/>
        <to usec="0" sec="1433567427"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="176.8.37.135"/>
        </slice>
        <from usec="0" sec="1433566827"/>
        <to usec="0" sec="1433567409"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="88.67.75.220"/>
        </slice>
        <from usec="0" sec="1433566906"/>
        <to usec="0" sec="1433567448"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="222.240.140.92" dst_ip="196.125.91.40" dst_port="53"/>
            <filter src_ip="197.43.208.201" dst_ip="196.125.91.40" dst_port="53"/>
        </slice>
        <from usec="0" sec="1433566995"/>
        <to usec="0" sec="1433567272"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="222.148.48.212"/>
        </slice>
        <from usec="0" sec="1433567077"/>
        <to usec="0" sec="1433567314"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="88.119.236.211"/>
        </slice>
        <from usec="0" sec="1433567245"/>
        <to usec="0" sec="1433567441"/>
    </anomaly>
    <anomaly type="notice" value="0.573369,1.372660,504,1 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="170.69.79.75" dst_port="443"/>
        </slice>
        <from usec="0" sec="1433567287"/>
        <to usec="0" sec="1433567438"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="87.121.185.188"/>
        </slice>
        <from usec="0" sec="1433567345"/>
        <to usec="0" sec="1433567398"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="205.250.83.140"/>
        </slice>
        <from usec="0" sec="1433567401"/>
        <to usec="0" sec="1433567448"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="197.151.67.217"/>
        </slice>
        <from usec="0" sec="1433567407"/>
        <to usec="0" sec="1433567421"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="180.16.40.158"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567620"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="50.135.67.64"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567628"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="138.159.174.178"/>
        </slice>
        <from usec="0" sec="1433566842"/>
        <to usec="0" sec="1433567629"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="222.46.163.55"/>
        </slice>
        <from usec="0" sec="1433566844"/>
        <to usec="0" sec="1433567625"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="170.69.106.5"/>
        </slice>
        <from usec="0" sec="1433567088"/>
        <to usec="0" sec="1433567615"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,010,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="13.90.136.167"/>
        </slice>
        <from usec="0" sec="1433567130"/>
        <to usec="0" sec="1433567565"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="197.2.194.58"/>
        </slice>
        <from usec="0" sec="1433567454"/>
        <to usec="0" sec="1433567629"/>
    </anomaly>
    <anomaly type="notice" value="0.643403,1.411970,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="78.245.124.154"/>
        </slice>
        <from usec="0" sec="1433567484"/>
        <to usec="0" sec="1433567629"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="145.7.173.196" dst_port="161"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433566847"/>
    </anomaly>
    <anomaly type="notice" value="0.786577,1.449490,010,1 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="87.114.211.221" src_port="12200" dst_port="1095"/>
            <filter src_ip="87.114.211.221" src_port="12200" dst_port="60088"/>
            <filter src_ip="87.114.211.221" src_port="12200" dst_port="1081"/>
            <filter src_ip="87.114.211.221" src_port="12200" dst_port="1080"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433566847"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="184.186.67.237" src_port="53"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433566847"/>
    </anomaly>
    <anomaly type="notice" value="0.786577,1.449490,503,1 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="174.41.44.153" src_port="80"/>
        </slice>
        <from usec="0" sec="1433566875"/>
        <to usec="0" sec="1433567551"/>
    </anomaly>
    <anomaly type="notice" value="0.786577,1.449490,503,1 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="184.186.254.169" src_port="80"/>
            <filter dst_ip="184.186.254.169" src_port="443"/>
        </slice>
        <from usec="0" sec="1433566803"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="196.125.92.144"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="87.26.127.227"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,053,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="196.125.81.126" dst_port="80"/>
            <filter dst_ip="196.125.81.126"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="197.2.83.44"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="150.96.143.16"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="197.2.83.42"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="196.125.70.97"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="197.2.84.53"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="197.14.22.109"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="7.128.134.14" dst_port="53"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,020,0 0 0 0 0 0 1 0 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="197.14.54.190"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="196.125.87.195"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="138.159.207.15"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="4.208.237.125" dst_ip="138.159.113.182" src_port="80"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="196.125.87.215"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="197.2.193.169"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.786577,1.449490,504,1 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="88.82.198.211" dst_ip="174.41.45.190" src_port="443"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567582"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="196.125.87.209"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="196.125.87.210"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="184.186.247.89"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.937875,1.492950,020,0 0 0 1 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="87.107.24.101"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567449"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="87.107.24.100"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="145.7.173.196"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="87.40.255.250"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.937875,1.492950,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="176.8.150.198" dst_port="53"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567269"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="176.8.80.161"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.786577,1.449490,503,1 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="197.2.194.169" src_port="80"/>
            <filter dst_ip="197.2.194.169" src_port="443"/>
        </slice>
        <from usec="0" sec="1433566817"/>
        <to usec="0" sec="1433567700"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="176.8.98.153"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="197.2.82.127"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="196.125.86.193"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="176.8.179.213"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="176.8.195.255"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="176.8.125.206"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.786577,1.449490,503,1 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="222.187.107.220" dst_ip="184.186.158.226" src_port="80"/>
        </slice>
        <from usec="0" sec="1433566806"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="176.8.179.250"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="176.8.233.212"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.786577,1.449490,504,1 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="138.159.23.76" src_port="80"/>
            <filter dst_ip="138.159.23.76" src_port="443"/>
        </slice>
        <from usec="0" sec="1433566813"/>
        <to usec="0" sec="1433567101"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="32.188.137.2"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="196.125.83.158"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,502,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="73.166.215.140"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="196.125.80.244"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="176.8.195.181"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="176.8.179.175"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="176.8.193.189"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="197.2.195.54"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="197.2.195.57"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,rflatDNS">
        <slice>
            <filter dst_ip="176.8.195.67" src_port="53"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="183.131.113.51" src_port="53"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="183.131.113.50" src_port="53"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="176.8.193.28" src_port="53"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="174.41.92.72" src_port="53"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="138.159.176.230" src_port="53"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,rflatDNS">
        <slice>
            <filter dst_ip="138.159.176.207" src_port="53"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.937875,1.492950,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="174.41.58.134" src_port="53"/>
        </slice>
        <from usec="0" sec="1433566801"/>
        <to usec="0" sec="1433567269"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="184.186.184.211" src_port="53"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="196.125.80.207" src_port="53"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="196.125.80.206" src_port="53"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567027"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="87.107.24.102" dst_port="7777"/>
        </slice>
        <from usec="0" sec="1433567206"/>
        <to usec="0" sec="1433567252"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,503,0 0 0 0 0 0 1 0 0 0 0 0,ntscACKt">
        <slice>
            <filter src_ip="203.222.29.66" dst_port="80"/>
        </slice>
        <from usec="0" sec="1433567206"/>
        <to usec="0" sec="1433567252"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="203.222.29.66" dst_port="8888"/>
        </slice>
        <from usec="0" sec="1433567206"/>
        <to usec="0" sec="1433567252"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="215.37.176.129" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1433567296"/>
        <to usec="0" sec="1433567342"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="87.107.24.100" dst_port="8088"/>
        </slice>
        <from usec="0" sec="1433567296"/>
        <to usec="0" sec="1433567342"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="87.107.24.102" dst_port="7777"/>
        </slice>
        <from usec="0" sec="1433567296"/>
        <to usec="0" sec="1433567342"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="145.7.173.196" dst_port="161"/>
        </slice>
        <from usec="0" sec="1433567296"/>
        <to usec="0" sec="1433567342"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="87.107.24.103" dst_port="111"/>
        </slice>
        <from usec="0" sec="1433567296"/>
        <to usec="0" sec="1433567342"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="87.107.24.103" dst_port="123"/>
        </slice>
        <from usec="0" sec="1433567296"/>
        <to usec="0" sec="1433567342"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,010,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="196.125.81.126" dst_port="80"/>
        </slice>
        <from usec="0" sec="1433567296"/>
        <to usec="0" sec="1433567342"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="87.26.127.227" src_port="45866" dst_port="8888"/>
        </slice>
        <from usec="0" sec="1433567296"/>
        <to usec="0" sec="1433567387"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,503,0 0 0 0 0 0 1 0 0 0 0 0,ntscACKt">
        <slice>
            <filter src_ip="203.222.29.66" src_port="36351" dst_port="80"/>
            <filter src_ip="203.222.29.66" src_port="36352" dst_port="80"/>
        </slice>
        <from usec="0" sec="1433567296"/>
        <to usec="0" sec="1433567387"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="203.222.29.66" src_port="36351" dst_port="443"/>
            <filter src_ip="203.222.29.66" src_port="36352" dst_port="443"/>
        </slice>
        <from usec="0" sec="1433567296"/>
        <to usec="0" sec="1433567387"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="203.222.29.66" dst_port="8888"/>
        </slice>
        <from usec="0" sec="1433567341"/>
        <to usec="0" sec="1433567387"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="145.7.173.196" dst_port="161"/>
        </slice>
        <from usec="0" sec="1433567431"/>
        <to usec="0" sec="1433567477"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="215.37.176.129"/>
        </slice>
        <from usec="0" sec="1433567476"/>
        <to usec="0" sec="1433567522"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="87.26.127.227" src_port="45866" dst_port="8888"/>
        </slice>
        <from usec="0" sec="1433567431"/>
        <to usec="0" sec="1433567522"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="87.107.24.102" src_port="60000" dst_port="7777"/>
        </slice>
        <from usec="0" sec="1433567431"/>
        <to usec="0" sec="1433567522"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,503,0 0 0 0 0 0 1 0 0 0 0 0,ntscACKt">
        <slice>
            <filter src_ip="203.222.29.66" src_port="37119" dst_port="80"/>
            <filter src_ip="203.222.29.66" src_port="37120" dst_port="80"/>
        </slice>
        <from usec="0" sec="1433567431"/>
        <to usec="0" sec="1433567522"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="176.8.195.67"/>
        </slice>
        <from usec="0" sec="1433567566"/>
        <to usec="0" sec="1433567612"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="138.159.176.230" src_port="53"/>
        </slice>
        <from usec="0" sec="1433567566"/>
        <to usec="0" sec="1433567612"/>
    </anomaly>
    <anomaly type="notice" value="0.786577,1.449490,503,1 0 0 0 0 0 1 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="174.54.207.149" src_port="80"/>
        </slice>
        <from usec="0" sec="1433566860"/>
        <to usec="0" sec="1433567643"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="9.19.66.216"/>
        </slice>
        <from usec="0" sec="1433567566"/>
        <to usec="0" sec="1433567612"/>
    </anomaly>
    <anomaly type="notice" value="0.838999,1.486770,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="196.125.86.38" src_port="53"/>
            <filter dst_ip="196.125.86.38"/>
        </slice>
        <from usec="0" sec="1433566981"/>
        <to usec="0" sec="1433567612"/>
    </anomaly>
    <anomaly type="notice" value="0.891288,1.455820,504,1 0 0 1 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="197.2.194.11" src_port="80"/>
            <filter dst_ip="197.2.194.11" src_port="443"/>
        </slice>
        <from usec="0" sec="1433567549"/>
        <to usec="0" sec="1433567612"/>
    </anomaly>
    <anomaly type="notice" value="0.649170,1.419290,503,0 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="13.127.108.19" dst_ip="197.2.194.11" src_port="80" dst_port="5550"/>
        </slice>
        <from usec="0" sec="1433566983"/>
        <to usec="0" sec="1433566992"/>
    </anomaly>
</admd:annotation>
