<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="135.111.136.18" dst_ip="214.190.239.80" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245693"/>
        <to usec="0" sec="1436245878"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="194.180.38.144" src_port="31415"/>
        </slice>
        <from usec="0" sec="1436245248"/>
        <to usec="0" sec="1436245884"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="44.143.130.77" dst_ip="135.111.200.230" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245295"/>
        <to usec="0" sec="1436245297"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="38.93.31.45" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245711"/>
        <to usec="0" sec="1436245887"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="119.139.84.191" dst_ip="159.78.150.12" src_port="182" dst_port="50822" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245899"/>
        <to usec="0" sec="1436246002"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="29.96.106.111" dst_ip="165.214.178.23" src_port="443" dst_port="65111" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245907"/>
        <to usec="0" sec="1436245909"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="165.214.3.1"/>
        </slice>
        <from usec="0" sec="1436245502"/>
        <to usec="0" sec="1436245505"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="151.95.153.206" dst_ip="106.189.95.243" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245604"/>
        <to usec="0" sec="1436246007"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.43.11.155" dst_ip="165.214.67.101" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245881"/>
        <to usec="0" sec="1436245883"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="141.185.186.179" dst_ip="151.95.102.149" src_port="33886" dst_port="5641" proto="udp"/>
        </slice>
        <from usec="0" sec="1436245832"/>
        <to usec="0" sec="1436245841"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="135.118.31.178"/>
        </slice>
        <from usec="0" sec="1436246039"/>
        <to usec="0" sec="1436246061"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="29.96.106.101" dst_ip="165.214.178.13" src_port="443" dst_port="64694" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245255"/>
        <to usec="0" sec="1436246002"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="135.118.90.77" dst_ip="29.96.97.124" src_port="45395" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245218"/>
        <to usec="0" sec="1436245323"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="77.234.21.62" dst_ip="159.78.108.152" src_port="80" dst_port="53416" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245549"/>
        <to usec="0" sec="1436245551"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="135.118.104.33" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245370"/>
        <to usec="0" sec="1436245499"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="62.200.20.108"/>
        </slice>
        <from usec="0" sec="1436246071"/>
        <to usec="0" sec="1436246073"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="123.140.91.109"/>
        </slice>
        <from usec="0" sec="1436246041"/>
        <to usec="0" sec="1436246043"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="215.29.39.249" dst_ip="159.78.70.168" src_port="51488" dst_port="63942" proto="udp"/>
        </slice>
        <from usec="0" sec="1436245279"/>
        <to usec="0" sec="1436245694"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.183.115.48"/>
        </slice>
        <from usec="0" sec="1436245450"/>
        <to usec="0" sec="1436245453"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.35.37.249" dst_ip="135.111.113.136" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245653"/>
        <to usec="0" sec="1436245655"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="165.214.254.178" dst_ip="17.169.9.135" src_port="55837" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245352"/>
        <to usec="0" sec="1436245358"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="219.79.25.151" dst_ip="151.95.81.73" src_port="80" dst_port="63482" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245373"/>
        <to usec="0" sec="1436245375"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="214.47.15.227"/>
        </slice>
        <from usec="0" sec="1436245538"/>
        <to usec="0" sec="1436245540"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="98.167.133.171" dst_ip="165.214.1.245" src_port="80" dst_port="56720" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245234"/>
        <to usec="0" sec="1436245236"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="195.15.86.41" dst_ip="214.43.137.159" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245942"/>
        <to usec="0" sec="1436245996"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="165.214.246.107" dst_ip="106.189.95.243" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245392"/>
        <to usec="0" sec="1436245729"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="195.15.196.158"/>
        </slice>
        <from usec="0" sec="1436245920"/>
        <to usec="0" sec="1436245922"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="165.214.173.211" dst_ip="164.15.37.106" src_port="38848" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245204"/>
        <to usec="0" sec="1436246094"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="135.118.107.81"/>
        </slice>
        <from usec="0" sec="1436245560"/>
        <to usec="0" sec="1436245563"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="165.214.177.51"/>
        </slice>
        <from usec="0" sec="1436245536"/>
        <to usec="0" sec="1436245997"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="165.214.2.100" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245217"/>
        <to usec="0" sec="1436245684"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,502,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="93.57.51.70"/>
        </slice>
        <from usec="0" sec="1436245859"/>
        <to usec="0" sec="1436245887"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="85.132.131.131"/>
        </slice>
        <from usec="0" sec="1436245443"/>
        <to usec="0" sec="1436245446"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="165.214.244.8" dst_ip="213.115.144.70" src_port="63999" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436246046"/>
        <to usec="0" sec="1436246048"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="135.111.132.250"/>
        </slice>
        <from usec="0" sec="1436245916"/>
        <to usec="0" sec="1436245921"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="167.122.148.5" dst_ip="165.214.178.39" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245565"/>
        <to usec="0" sec="1436245567"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="195.15.86.53"/>
        </slice>
        <from usec="0" sec="1436245893"/>
        <to usec="0" sec="1436245895"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="135.118.107.74" dst_ip="56.144.231.84" src_port="63113" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245651"/>
        <to usec="0" sec="1436245958"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="151.95.102.149" dst_ip="141.185.186.179" src_port="5641" dst_port="33886" proto="udp"/>
        </slice>
        <from usec="0" sec="1436245536"/>
        <to usec="0" sec="1436245547"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="56.70.160.86" dst_ip="159.78.27.81" src_port="34171" dst_port="53512" proto="udp"/>
        </slice>
        <from usec="0" sec="1436245212"/>
        <to usec="0" sec="1436245220"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="165.214.0.190" dst_ip="130.234.229.5" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245898"/>
        <to usec="0" sec="1436245900"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="20.207.32.253" dst_ip="165.214.203.83" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245210"/>
        <to usec="0" sec="1436245211"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="128.138.221.110" dst_ip="206.208.195.241" proto="udp"/>
        </slice>
        <from usec="0" sec="1436245846"/>
        <to usec="0" sec="1436246093"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="128.138.242.128" dst_ip="132.102.109.231" src_port="53532" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245742"/>
        <to usec="0" sec="1436245744"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="197.156.112.99" dst_ip="151.95.102.201" src_port="443" dst_port="62860" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245948"/>
        <to usec="0" sec="1436245950"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="195.15.211.249" dst_ip="64.180.178.149" src_port="1146" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245305"/>
        <to usec="0" sec="1436245307"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="128.138.24.230" dst_ip="133.219.153.236" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245251"/>
        <to usec="0" sec="1436245252"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="135.111.62.5" dst_ip="212.101.135.47" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245408"/>
        <to usec="0" sec="1436245499"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="135.118.26.248" dst_ip="29.96.97.124" src_port="58639" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245478"/>
        <to usec="0" sec="1436245480"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="172.213.49.90" dst_ip="194.180.34.245" dst_port="143" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245624"/>
        <to usec="0" sec="1436245626"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="217.46.126.166" dst_ip="195.15.194.236" src_port="80" dst_port="60441" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245705"/>
        <to usec="0" sec="1436245712"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="135.118.26.250"/>
        </slice>
        <from usec="0" sec="1436245453"/>
        <to usec="0" sec="1436245472"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="128.138.196.234" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245202"/>
        <to usec="0" sec="1436246026"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="151.95.213.34" dst_ip="29.96.98.132" src_port="49362" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436246052"/>
        <to usec="0" sec="1436246054"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="115.21.228.110" dst_ip="165.214.10.91" src_port="80" dst_port="34747" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245346"/>
        <to usec="0" sec="1436245468"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="194.180.39.253" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245247"/>
        <to usec="0" sec="1436245358"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="135.118.111.74"/>
        </slice>
        <from usec="0" sec="1436245950"/>
        <to usec="0" sec="1436245952"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="95.3.21.202" dst_ip="159.78.148.147" src_port="5108" dst_port="60781" proto="udp"/>
        </slice>
        <from usec="0" sec="1436245853"/>
        <to usec="0" sec="1436245997"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="82.15.196.143" dst_ip="195.2.153.149" src_port="27322" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245425"/>
        <to usec="0" sec="1436245427"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="165.214.176.51" dst_ip="187.219.215.96" src_port="52855" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245221"/>
        <to usec="0" sec="1436245936"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="165.214.1.237" dst_ip="203.173.40.184" src_port="57243" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245515"/>
        <to usec="0" sec="1436245519"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="135.111.188.111"/>
        </slice>
        <from usec="0" sec="1436245220"/>
        <to usec="0" sec="1436245342"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="195.93.166.169" dst_ip="195.15.218.90" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245682"/>
        <to usec="0" sec="1436245694"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="98.167.132.97" dst_ip="165.214.1.72" src_port="443" dst_port="50205" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245244"/>
        <to usec="0" sec="1436245246"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="77.251.16.26" dst_ip="159.78.183.119" src_port="61425" dst_port="12138" proto="udp"/>
        </slice>
        <from usec="0" sec="1436245217"/>
        <to usec="0" sec="1436245411"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="151.95.102.212" dst_ip="38.197.242.138" src_port="44540" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245638"/>
        <to usec="0" sec="1436245640"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="195.15.82.114" dst_ip="175.225.133.157" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245244"/>
        <to usec="0" sec="1436245246"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="151.95.102.231"/>
        </slice>
        <from usec="0" sec="1436245868"/>
        <to usec="0" sec="1436245916"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="119.76.182.194" dst_ip="135.111.254.45" src_port="80" dst_port="12335" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245856"/>
        <to usec="0" sec="1436245858"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="135.118.110.191"/>
        </slice>
        <from usec="0" sec="1436245668"/>
        <to usec="0" sec="1436245671"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="106.189.95.243" dst_ip="165.214.246.107" src_port="80" dst_port="51914" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245703"/>
        <to usec="0" sec="1436245705"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="151.95.48.0"/>
        </slice>
        <from usec="0" sec="1436245404"/>
        <to usec="0" sec="1436245406"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="98.167.133.212" dst_ip="195.15.85.205" src_port="1935" dst_port="57597" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245703"/>
        <to usec="0" sec="1436245705"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="135.111.236.146" dst_ip="212.61.176.1" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245862"/>
        <to usec="0" sec="1436245864"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="165.214.178.15" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245367"/>
        <to usec="0" sec="1436246097"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="128.138.37.26" dst_ip="62.220.151.102" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245965"/>
        <to usec="0" sec="1436245968"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="194.43.147.140" dst_ip="159.78.25.36" src_port="80" dst_port="60762" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245880"/>
        <to usec="0" sec="1436245882"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="20.94.194.176" dst_ip="159.78.180.96" src_port="443" dst_port="56063" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245292"/>
        <to usec="0" sec="1436245294"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="151.95.102.234" dst_ip="124.105.41.32" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245576"/>
        <to usec="0" sec="1436245937"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="151.95.78.239" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245724"/>
        <to usec="0" sec="1436245883"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="96.157.217.187" dst_ip="203.235.166.147" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245385"/>
        <to usec="0" sec="1436245387"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="159.73.181.119" dst_ip="135.111.41.239" src_port="57214" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245294"/>
        <to usec="0" sec="1436245297"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="98.167.132.67" dst_ip="195.15.196.122" src_port="80" dst_port="55579" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436246060"/>
        <to usec="0" sec="1436246063"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="195.2.162.66" dst_ip="203.31.245.41" src_port="55630" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245375"/>
        <to usec="0" sec="1436245918"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="85.192.235.120" dst_ip="165.214.65.41" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245399"/>
        <to usec="0" sec="1436245403"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="159.73.181.112" dst_ip="135.111.41.239" src_port="24000" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245222"/>
        <to usec="0" sec="1436245227"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="108.43.19.159" dst_ip="151.95.51.89" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245404"/>
        <to usec="0" sec="1436245476"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="135.118.110.169"/>
        </slice>
        <from usec="0" sec="1436245894"/>
        <to usec="0" sec="1436245896"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="194.43.147.158" dst_ip="159.78.25.36" src_port="80" dst_port="60766" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245872"/>
        <to usec="0" sec="1436245874"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="103.144.99.243"/>
        </slice>
        <from usec="0" sec="1436245723"/>
        <to usec="0" sec="1436246000"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="159.73.181.121" dst_ip="135.111.41.239" src_port="36528" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245402"/>
        <to usec="0" sec="1436245405"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="165.214.12.85" dst_ip="82.15.135.235" src_port="60300" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245913"/>
        <to usec="0" sec="1436245917"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="20.30.42.191" dst_ip="165.214.33.7" src_port="80" dst_port="49873" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436246017"/>
        <to usec="0" sec="1436246019"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="86.173.156.125" dst_ip="165.214.245.115" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245376"/>
        <to usec="0" sec="1436245423"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="135.111.9.177" dst_ip="212.101.133.62" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245895"/>
        <to usec="0" sec="1436246007"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="11.115.69.246" dst_ip="159.78.108.152" src_port="80" dst_port="60381" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245301"/>
        <to usec="0" sec="1436245303"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="135.118.31.249" dst_ip="62.220.199.242" src_port="64564" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245674"/>
        <to usec="0" sec="1436245677"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="195.2.166.9" dst_ip="96.142.221.251" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245449"/>
        <to usec="0" sec="1436245982"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="106.66.246.226" dst_ip="194.180.32.3" src_port="15232" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245700"/>
        <to usec="0" sec="1436245715"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="48.166.77.54" dst_ip="151.95.228.90" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245256"/>
        <to usec="0" sec="1436245258"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="62.200.20.211" dst_ip="195.2.153.168" src_port="51757" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245898"/>
        <to usec="0" sec="1436245900"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="135.118.107.229" dst_ip="187.228.245.82" src_port="54836" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245280"/>
        <to usec="0" sec="1436246075"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="135.118.119.26" dst_ip="157.60.198.122" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245631"/>
        <to usec="0" sec="1436245938"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="165.214.176.220" dst_ip="66.105.101.170" src_port="53049" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245373"/>
        <to usec="0" sec="1436246071"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="111.135.66.135" dst_ip="159.78.255.139" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245468"/>
        <to usec="0" sec="1436245470"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="128.138.196.43"/>
        </slice>
        <from usec="0" sec="1436245217"/>
        <to usec="0" sec="1436246036"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="211.12.136.181" dst_ip="159.78.4.43" src_port="55079" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245279"/>
        <to usec="0" sec="1436245306"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="165.214.245.112" dst_ip="212.101.145.116" src_port="49494" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245996"/>
        <to usec="0" sec="1436246000"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="135.118.110.51" dst_ip="212.101.135.114" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245251"/>
        <to usec="0" sec="1436246093"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="165.214.2.231" dst_ip="62.220.181.2" src_port="56768" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245399"/>
        <to usec="0" sec="1436245402"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.208.243.8" dst_ip="194.180.37.108" src_port="60723" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245907"/>
        <to usec="0" sec="1436245909"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="151.95.26.114"/>
        </slice>
        <from usec="0" sec="1436245212"/>
        <to usec="0" sec="1436245327"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="99.171.124.133" dst_ip="194.180.47.87" src_port="52626" dst_port="16402" proto="udp"/>
        </slice>
        <from usec="0" sec="1436246085"/>
        <to usec="0" sec="1436246087"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="128.138.156.249" dst_ip="67.197.119.74" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245682"/>
        <to usec="0" sec="1436246000"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="135.118.95.141" dst_ip="0.186.218.29" src_port="57387" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245213"/>
        <to usec="0" sec="1436246096"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="135.118.114.114"/>
        </slice>
        <from usec="0" sec="1436245243"/>
        <to usec="0" sec="1436245798"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="135.118.111.170" dst_ip="197.219.135.250" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245664"/>
        <to usec="0" sec="1436245666"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="135.118.109.3" dst_ip="212.97.113.216" src_port="59383" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245494"/>
        <to usec="0" sec="1436245628"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="195.15.198.65" dst_ip="175.225.191.206" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245762"/>
        <to usec="0" sec="1436245765"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="11.216.20.106" dst_ip="135.111.113.154" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245210"/>
        <to usec="0" sec="1436245212"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="195.15.197.136" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245938"/>
        <to usec="0" sec="1436246093"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="128.138.125.201" dst_ip="62.220.62.206" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245248"/>
        <to usec="0" sec="1436245256"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="165.214.2.217"/>
        </slice>
        <from usec="0" sec="1436245879"/>
        <to usec="0" sec="1436245888"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="48.166.88.211" dst_ip="165.214.243.155" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436246061"/>
        <to usec="0" sec="1436246063"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="85.200.45.124"/>
        </slice>
        <from usec="0" sec="1436245261"/>
        <to usec="0" sec="1436245264"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="128.138.24.113" dst_ip="210.245.16.187" src_port="52803" dst_port="587" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245996"/>
        <to usec="0" sec="1436246019"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="151.95.159.164" dst_ip="212.101.147.250" src_port="40324" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245867"/>
        <to usec="0" sec="1436245878"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="165.214.0.77"/>
        </slice>
        <from usec="0" sec="1436245230"/>
        <to usec="0" sec="1436245441"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="135.118.145.119" dst_ip="104.213.92.91" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245232"/>
        <to usec="0" sec="1436245941"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="135.118.111.185"/>
        </slice>
        <from usec="0" sec="1436245506"/>
        <to usec="0" sec="1436245516"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="135.118.112.104" dst_ip="175.195.237.184" src_port="57191" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245508"/>
        <to usec="0" sec="1436245517"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="128.138.45.182" dst_ip="207.138.78.250" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245230"/>
        <to usec="0" sec="1436245420"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="128.138.101.200" dst_ip="104.213.92.90" src_port="52477" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436246062"/>
        <to usec="0" sec="1436246064"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="206.245.164.88" dst_ip="151.95.134.137" src_port="80" dst_port="40938" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245646"/>
        <to usec="0" sec="1436245648"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="195.15.198.17" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245508"/>
        <to usec="0" sec="1436245512"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="107.238.9.199" dst_ip="165.214.161.14" src_port="80" dst_port="53847" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245251"/>
        <to usec="0" sec="1436245252"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="135.111.226.76"/>
        </slice>
        <from usec="0" sec="1436245401"/>
        <to usec="0" sec="1436245444"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="135.118.27.107"/>
        </slice>
        <from usec="0" sec="1436245207"/>
        <to usec="0" sec="1436245210"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="135.118.26.66" dst_ip="47.244.195.35" src_port="49585" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245835"/>
        <to usec="0" sec="1436245837"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="135.118.108.194" dst_ip="123.0.186.207" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245741"/>
        <to usec="0" sec="1436246093"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="165.214.0.0"/>
        </slice>
        <from usec="0" sec="1436245512"/>
        <to usec="0" sec="1436245515"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="165.214.216.141"/>
        </slice>
        <from usec="0" sec="1436245329"/>
        <to usec="0" sec="1436245688"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="135.118.58.152" dst_ip="20.213.51.9" src_port="57428" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245217"/>
        <to usec="0" sec="1436245230"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="128.138.232.93" dst_ip="62.220.6.157" src_port="54235" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436246002"/>
        <to usec="0" sec="1436246004"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="135.118.31.104" dst_ip="29.96.97.80" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245355"/>
        <to usec="0" sec="1436245887"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="165.214.100.48" dst_ip="173.179.68.55" src_port="57936" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245358"/>
        <to usec="0" sec="1436245365"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="194.180.43.234"/>
        </slice>
        <from usec="0" sec="1436245231"/>
        <to usec="0" sec="1436245234"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="165.214.158.40" dst_ip="203.208.234.240" dst_port="443"/>
            <filter src_ip="165.214.158.40" dst_ip="203.208.234.243" dst_port="443"/>
        </slice>
        <from usec="0" sec="1436245451"/>
        <to usec="0" sec="1436245986"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="56.243.176.148" dst_ip="151.95.226.39" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245633"/>
        <to usec="0" sec="1436245635"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="135.12.43.124" dst_ip="165.214.67.101" src_port="56125" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245275"/>
        <to usec="0" sec="1436245279"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="58.71.17.192"/>
        </slice>
        <from usec="0" sec="1436246054"/>
        <to usec="0" sec="1436246056"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="165.214.176.153" dst_ip="44.189.18.120" src_port="51927" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245202"/>
        <to usec="0" sec="1436245583"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="110.35.30.193" dst_ip="159.78.26.251" src_port="80" dst_port="57579" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245206"/>
        <to usec="0" sec="1436245208"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="135.118.105.77" dst_ip="105.234.189.235" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245223"/>
        <to usec="0" sec="1436245431"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="165.214.0.63" dst_ip="68.7.91.155" src_port="51937" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245299"/>
        <to usec="0" sec="1436245373"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="128.138.139.234" dst_ip="62.202.149.215" src_port="62256" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245580"/>
        <to usec="0" sec="1436245583"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="165.214.148.117" dst_ip="206.201.145.56" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245283"/>
        <to usec="0" sec="1436245285"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="135.111.122.197" dst_ip="48.142.178.84" src_port="14233" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245367"/>
        <to usec="0" sec="1436245442"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="194.180.42.31" dst_ip="96.82.225.34" src_port="56205" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245258"/>
        <to usec="0" sec="1436245466"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="128.138.254.66" dst_ip="182.201.32.133" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245414"/>
        <to usec="0" sec="1436245416"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="194.180.37.155" dst_ip="115.235.145.198" src_port="51749" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245401"/>
        <to usec="0" sec="1436245427"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="128.138.47.171" dst_ip="62.220.198.96" src_port="32989" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245702"/>
        <to usec="0" sec="1436245708"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="195.15.194.242" dst_ip="212.101.136.201" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245216"/>
        <to usec="0" sec="1436245371"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.252.106.40" dst_ip="159.78.255.199" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436246011"/>
        <to usec="0" sec="1436246013"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="128.138.52.172" dst_ip="62.220.217.88" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245279"/>
        <to usec="0" sec="1436245282"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="135.192.198.204"/>
        </slice>
        <from usec="0" sec="1436245249"/>
        <to usec="0" sec="1436245437"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="172.224.127.97" dst_ip="159.78.25.167" src_port="4580" dst_port="6175"/>
        </slice>
        <from usec="0" sec="1436245217"/>
        <to usec="0" sec="1436245238"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="161.179.154.99" dst_ip="165.214.65.43" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245769"/>
        <to usec="0" sec="1436245771"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="17.164.243.215"/>
        </slice>
        <from usec="0" sec="1436246019"/>
        <to usec="0" sec="1436246022"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,503,1 1 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="165.214.1.233" dst_port="80"/>
            <filter src_ip="165.214.2.78" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245299"/>
        <to usec="0" sec="1436245969"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,503,1 1 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="73.93.175.5" dst_ip="135.111.155.253" dst_port="80"/>
            <filter src_ip="207.205.253.227" dst_ip="135.111.155.253" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245487"/>
        <to usec="0" sec="1436246004"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="29.96.98.177"/>
        </slice>
        <from usec="0" sec="1436245518"/>
        <to usec="0" sec="1436245567"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="165.214.49.82"/>
        </slice>
        <from usec="0" sec="1436245523"/>
        <to usec="0" sec="1436245525"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="195.15.81.0"/>
        </slice>
        <from usec="0" sec="1436245693"/>
        <to usec="0" sec="1436245696"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="11.115.69.246" dst_ip="11.115.69.246" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245301"/>
        <to usec="0" sec="1436246064"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="129.106.214.4"/>
        </slice>
        <from usec="0" sec="1436245690"/>
        <to usec="0" sec="1436245693"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="68.7.63.243"/>
        </slice>
        <from usec="0" sec="1436246091"/>
        <to usec="0" sec="1436246093"/>
    </anomaly>
    <anomaly type="notice" value="0.714858,1.277220,999,1 1 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="135.111.236.50" dst_port="25"/>
            <filter dst_ip="135.111.236.50" dst_port="995"/>
            <filter dst_ip="135.111.236.50" dst_port="993"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436246060"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="135.118.107.218" dst_port="443"/>
        </slice>
        <from usec="0" sec="1436245421"/>
        <to usec="0" sec="1436245798"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="165.214.254.186" dst_ip="62.220.3.172" dst_port="443"/>
            <filter src_ip="165.214.254.186" dst_ip="62.220.3.142" dst_port="443"/>
        </slice>
        <from usec="0" sec="1436245280"/>
        <to usec="0" sec="1436246065"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="62.220.11.166" dst_ip="62.220.11.166" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245456"/>
        <to usec="0" sec="1436245560"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="159.78.110.159"/>
        </slice>
        <from usec="0" sec="1436245277"/>
        <to usec="0" sec="1436245280"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="135.118.37.82" dst_ip="68.5.250.119" src_port="49386" dst_port="443"/>
        </slice>
        <from usec="0" sec="1436245900"/>
        <to usec="0" sec="1436245921"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="178.136.132.199" dst_ip="159.78.212.45" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245996"/>
        <to usec="0" sec="1436245997"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="111.135.66.68" dst_ip="165.214.0.62" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245355"/>
        <to usec="0" sec="1436245357"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.12.17.15"/>
        </slice>
        <from usec="0" sec="1436245480"/>
        <to usec="0" sec="1436245494"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="182.201.222.230" dst_ip="195.15.218.90" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245719"/>
        <to usec="0" sec="1436245852"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="128.138.244.35"/>
        </slice>
        <from usec="0" sec="1436245851"/>
        <to usec="0" sec="1436245854"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.19.63.33"/>
        </slice>
        <from usec="0" sec="1436246064"/>
        <to usec="0" sec="1436246071"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="135.118.104.20"/>
        </slice>
        <from usec="0" sec="1436245912"/>
        <to usec="0" sec="1436245922"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="135.118.105.174"/>
        </slice>
        <from usec="0" sec="1436245818"/>
        <to usec="0" sec="1436245824"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="195.15.206.180"/>
        </slice>
        <from usec="0" sec="1436245204"/>
        <to usec="0" sec="1436245207"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="195.15.85.137" dst_ip="48.116.252.50" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245496"/>
        <to usec="0" sec="1436245504"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="196.185.73.18"/>
        </slice>
        <from usec="0" sec="1436245832"/>
        <to usec="0" sec="1436245835"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="165.214.3.93" dst_ip="172.126.151.236" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245415"/>
        <to usec="0" sec="1436245467"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="135.118.150.14" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245419"/>
        <to usec="0" sec="1436245425"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="85.84.24.175"/>
        </slice>
        <from usec="0" sec="1436245280"/>
        <to usec="0" sec="1436245282"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="151.95.102.248"/>
        </slice>
        <from usec="0" sec="1436245710"/>
        <to usec="0" sec="1436245712"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="135.111.60.76" dst_ip="105.190.92.66" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245863"/>
        <to usec="0" sec="1436245884"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="128.138.241.77"/>
        </slice>
        <from usec="0" sec="1436245742"/>
        <to usec="0" sec="1436245744"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="135.118.26.56" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245249"/>
        <to usec="0" sec="1436245880"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="135.118.174.253"/>
        </slice>
        <from usec="0" sec="1436246091"/>
        <to usec="0" sec="1436246093"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="128.138.156.200" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245584"/>
        <to usec="0" sec="1436245917"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="194.180.47.36"/>
        </slice>
        <from usec="0" sec="1436246012"/>
        <to usec="0" sec="1436246015"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="135.118.95.239" dst_ip="213.79.207.218" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245826"/>
        <to usec="0" sec="1436245863"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="135.118.114.45"/>
        </slice>
        <from usec="0" sec="1436245506"/>
        <to usec="0" sec="1436245508"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="165.214.219.160"/>
        </slice>
        <from usec="0" sec="1436245998"/>
        <to usec="0" sec="1436246000"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.208.234.251"/>
        </slice>
        <from usec="0" sec="1436245487"/>
        <to usec="0" sec="1436245489"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="194.180.57.18" src_port="26123" proto="udp"/>
        </slice>
        <from usec="0" sec="1436245544"/>
        <to usec="0" sec="1436245551"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.93.188.127" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245289"/>
        <to usec="0" sec="1436245303"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.163.5.179" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436246064"/>
        <to usec="0" sec="1436246076"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.44.57.208"/>
        </slice>
        <from usec="0" sec="1436245267"/>
        <to usec="0" sec="1436245281"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.170.195.168" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245296"/>
        <to usec="0" sec="1436245301"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="205.213.2.30" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245215"/>
        <to usec="0" sec="1436245217"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="68.240.198.195"/>
        </slice>
        <from usec="0" sec="1436245853"/>
        <to usec="0" sec="1436245855"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.111.73.239" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245357"/>
        <to usec="0" sec="1436245379"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="101.49.199.245"/>
        </slice>
        <from usec="0" sec="1436245796"/>
        <to usec="0" sec="1436245798"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.119.12.131" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245209"/>
        <to usec="0" sec="1436245221"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="106.66.67.47"/>
        </slice>
        <from usec="0" sec="1436245356"/>
        <to usec="0" sec="1436245367"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.88.125.168"/>
        </slice>
        <from usec="0" sec="1436245916"/>
        <to usec="0" sec="1436245952"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="100.227.59.167" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245313"/>
        <to usec="0" sec="1436245325"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="35.34.229.144"/>
        </slice>
        <from usec="0" sec="1436245368"/>
        <to usec="0" sec="1436245379"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="11.114.66.243"/>
        </slice>
        <from usec="0" sec="1436245693"/>
        <to usec="0" sec="1436245712"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="180.213.176.179" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245873"/>
        <to usec="0" sec="1436245885"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.239.169.253" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245203"/>
        <to usec="0" sec="1436245207"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.206.144.130"/>
        </slice>
        <from usec="0" sec="1436245689"/>
        <to usec="0" sec="1436245691"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.111.42.174" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245639"/>
        <to usec="0" sec="1436245655"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.115.200.13"/>
        </slice>
        <from usec="0" sec="1436245826"/>
        <to usec="0" sec="1436245832"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.72.7.3" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245411"/>
        <to usec="0" sec="1436245426"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="0.251.160.48"/>
        </slice>
        <from usec="0" sec="1436245337"/>
        <to usec="0" sec="1436245344"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="188.42.47.207" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436246034"/>
        <to usec="0" sec="1436246036"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="89.57.120.187" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245438"/>
        <to usec="0" sec="1436245440"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.250.151.171" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245572"/>
        <to usec="0" sec="1436245582"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.243.22.55"/>
        </slice>
        <from usec="0" sec="1436246048"/>
        <to usec="0" sec="1436246061"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="219.193.68.69" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245359"/>
        <to usec="0" sec="1436245375"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="204.94.185.175"/>
        </slice>
        <from usec="0" sec="1436245449"/>
        <to usec="0" sec="1436245466"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="58.82.159.133"/>
        </slice>
        <from usec="0" sec="1436245903"/>
        <to usec="0" sec="1436245905"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="101.81.135.105" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245502"/>
        <to usec="0" sec="1436245511"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.148.36.95" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245720"/>
        <to usec="0" sec="1436245742"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="100.238.79.85" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245448"/>
        <to usec="0" sec="1436245460"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.16.69.46"/>
        </slice>
        <from usec="0" sec="1436245979"/>
        <to usec="0" sec="1436245984"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.6.10.197" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245688"/>
        <to usec="0" sec="1436245714"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="90.84.247.28" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245771"/>
        <to usec="0" sec="1436245801"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.115.38.159" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245206"/>
        <to usec="0" sec="1436245215"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="210.129.245.174"/>
        </slice>
        <from usec="0" sec="1436245631"/>
        <to usec="0" sec="1436245650"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.114.174.223" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245216"/>
        <to usec="0" sec="1436245241"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.113.159.61" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245638"/>
        <to usec="0" sec="1436245642"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="188.99.8.196" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245231"/>
        <to usec="0" sec="1436245235"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.253.126.26" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245271"/>
        <to usec="0" sec="1436245282"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="100.231.72.152"/>
        </slice>
        <from usec="0" sec="1436245440"/>
        <to usec="0" sec="1436245452"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.203.128.33" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245784"/>
        <to usec="0" sec="1436245786"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="100.240.235.227" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245213"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.45.136.160" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436246049"/>
        <to usec="0" sec="1436246054"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="79.228.138.66" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245263"/>
        <to usec="0" sec="1436245282"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="123.40.147.115"/>
        </slice>
        <from usec="0" sec="1436245904"/>
        <to usec="0" sec="1436245906"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="185.152.31.247"/>
        </slice>
        <from usec="0" sec="1436245360"/>
        <to usec="0" sec="1436245362"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,011,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="116.115.205.165" src_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245509"/>
        <to usec="0" sec="1436245511"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.185.240.53"/>
        </slice>
        <from usec="0" sec="1436245515"/>
        <to usec="0" sec="1436245517"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="135.118.105.44"/>
        </slice>
        <from usec="0" sec="1436245437"/>
        <to usec="0" sec="1436245440"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="128.138.108.57"/>
        </slice>
        <from usec="0" sec="1436245420"/>
        <to usec="0" sec="1436245422"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="194.180.57.92"/>
        </slice>
        <from usec="0" sec="1436245217"/>
        <to usec="0" sec="1436246091"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="135.118.104.62"/>
        </slice>
        <from usec="0" sec="1436245706"/>
        <to usec="0" sec="1436245708"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="135.111.14.137"/>
        </slice>
        <from usec="0" sec="1436245625"/>
        <to usec="0" sec="1436245628"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.36.120.160"/>
        </slice>
        <from usec="0" sec="1436246072"/>
        <to usec="0" sec="1436246075"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="195.15.198.103"/>
        </slice>
        <from usec="0" sec="1436245995"/>
        <to usec="0" sec="1436245997"/>
    </anomaly>
    <anomaly type="notice" value="0.413478,1.269650,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="135.118.30.15"/>
        </slice>
        <from usec="0" sec="1436245559"/>
        <to usec="0" sec="1436245561"/>
    </anomaly>
    <anomaly type="notice" value="0.821885,1.295750,503,1 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="135.118.53.119" dst_ip="175.225.191.209"/>
            <filter src_ip="135.118.53.119" dst_port="80"/>
            <filter dst_ip="77.22.175.252" dst_port="80"/>
            <filter dst_ip="175.225.191.209" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245723"/>
        <to usec="0" sec="1436246061"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,504,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="128.138.89.225" dst_port="443"/>
            <filter src_ip="128.138.89.225" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245206"/>
        <to usec="0" sec="1436246095"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,502,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.185.57.217" dst_port="22"/>
        </slice>
        <from usec="0" sec="1436245980"/>
        <to usec="0" sec="1436245993"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="90.84.236.151" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245988"/>
        <to usec="0" sec="1436246007"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,502,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="186.204.151.76" dst_ip="151.95.25.11" src_port="62487" dst_port="22"/>
        </slice>
        <from usec="0" sec="1436246069"/>
        <to usec="0" sec="1436246072"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="135.111.26.217" dst_ip="212.101.144.197" src_port="38795" dst_port="443"/>
        </slice>
        <from usec="0" sec="1436245404"/>
        <to usec="0" sec="1436245422"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="135.118.107.125" dst_ip="213.36.89.78" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245240"/>
        <to usec="0" sec="1436245470"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="135.111.110.221" dst_ip="29.96.101.220" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245474"/>
        <to usec="0" sec="1436245705"/>
    </anomaly>
    <anomaly type="notice" value="0.628673,1.305060,999,0 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="215.29.39.249" dst_ip="159.78.70.168" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245278"/>
        <to usec="0" sec="1436245280"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="184.181.180.82" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245476"/>
        <to usec="0" sec="1436245489"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="86.216.163.205" dst_ip="159.78.124.211" dst_port="993"/>
        </slice>
        <from usec="0" sec="1436245240"/>
        <to usec="0" sec="1436246000"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="151.95.185.86" dst_ip="212.101.134.46" src_port="54609" dst_port="443"/>
        </slice>
        <from usec="0" sec="1436245409"/>
        <to usec="0" sec="1436245431"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="165.214.172.193" dst_ip="115.244.27.27" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245203"/>
        <to usec="0" sec="1436245235"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="135.118.109.136" dst_ip="175.195.237.190" src_port="52348" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245203"/>
        <to usec="0" sec="1436245232"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="128.138.25.36" dst_ip="203.208.234.248" src_port="26831" dst_port="443"/>
        </slice>
        <from usec="0" sec="1436245205"/>
        <to usec="0" sec="1436245394"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,999,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="195.3.119.79" dst_ip="165.214.49.82" src_port="39256" dst_port="25"/>
        </slice>
        <from usec="0" sec="1436245756"/>
        <to usec="0" sec="1436245759"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="188.39.191.36" dst_ip="159.78.150.135" src_port="80" dst_port="54572"/>
        </slice>
        <from usec="0" sec="1436245842"/>
        <to usec="0" sec="1436245873"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="165.214.2.6" dst_ip="62.220.181.2" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245358"/>
        <to usec="0" sec="1436245516"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="165.214.49.91" dst_ip="214.19.42.63" src_port="61012" dst_port="25"/>
            <filter src_ip="165.214.49.91" dst_ip="211.59.205.46" src_port="37081" dst_port="25"/>
            <filter src_ip="165.214.49.91" dst_ip="211.59.205.108" src_port="54100" dst_port="25"/>
        </slice>
        <from usec="0" sec="1436246092"/>
        <to usec="0" sec="1436246094"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="135.118.106.102" dst_ip="11.114.187.44" dst_port="80"/>
            <filter src_ip="135.118.106.102" dst_ip="1.72.223.125" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245355"/>
        <to usec="0" sec="1436246100"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="195.15.193.254" dst_ip="62.212.229.195" src_port="51379" dst_port="443"/>
        </slice>
        <from usec="0" sec="1436245635"/>
        <to usec="0" sec="1436245637"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="165.214.1.231" dst_ip="62.200.211.57" src_port="47223" dst_port="443"/>
            <filter src_ip="165.214.1.231" dst_ip="62.200.211.57" src_port="34202" dst_port="443"/>
        </slice>
        <from usec="0" sec="1436245719"/>
        <to usec="0" sec="1436245844"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="62.30.52.21" dst_ip="151.95.102.211" src_port="80" dst_port="51118"/>
            <filter src_ip="62.30.52.21" dst_ip="151.95.102.211" src_port="80" dst_port="42055"/>
            <filter src_ip="62.30.52.21" dst_ip="151.95.102.211" src_port="80" dst_port="36600"/>
        </slice>
        <from usec="0" sec="1436245817"/>
        <to usec="0" sec="1436245829"/>
    </anomaly>
    <anomaly type="notice" value="0.921871,1.435950,010,1 0 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.153.47.171" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245570"/>
        <to usec="0" sec="1436245581"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="165.214.0.227" dst_ip="17.165.40.12" dst_port="443"/>
        </slice>
        <from usec="0" sec="1436245213"/>
        <to usec="0" sec="1436245584"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="86.220.30.122" dst_ip="159.78.70.173" src_port="3487" dst_port="1128"/>
        </slice>
        <from usec="0" sec="1436246027"/>
        <to usec="0" sec="1436246098"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="135.118.56.115" dst_ip="188.39.191.31" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245217"/>
        <to usec="0" sec="1436246094"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="165.214.3.97" dst_ip="62.9.69.125" dst_port="80"/>
            <filter src_ip="165.214.3.97" dst_ip="202.92.142.236" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245261"/>
        <to usec="0" sec="1436245310"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="85.133.14.61" dst_ip="165.214.100.136" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245732"/>
        <to usec="0" sec="1436245737"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,503,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="186.80.147.97" src_port="80"/>
        </slice>
        <from usec="0" sec="1436245203"/>
        <to usec="0" sec="1436245742"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="195.2.153.168" dst_ip="214.19.42.63" src_port="11753" dst_port="25"/>
            <filter src_ip="195.2.153.168" dst_ip="198.240.162.95" src_port="25" dst_port="55640"/>
        </slice>
        <from usec="0" sec="1436245607"/>
        <to usec="0" sec="1436245611"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="123.31.16.203" dst_ip="165.214.65.26" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245251"/>
        <to usec="0" sec="1436245385"/>
    </anomaly>
    <anomaly type="notice" value="0.714858,1.277220,999,1 1 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="159.73.181.124" dst_port="2869"/>
            <filter src_ip="159.73.181.124" dst_ip="151.95.18.177" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1436245212"/>
        <to usec="0" sec="1436245630"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="135.118.29.13" dst_ip="164.50.217.8" dst_port="80"/>
            <filter src_ip="135.118.29.13" dst_ip="164.50.217.10" dst_port="80"/>
            <filter src_ip="135.118.29.13" dst_ip="164.50.217.19" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245204"/>
        <to usec="0" sec="1436246096"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="187.219.212.66" dst_ip="151.95.134.18" src_port="80" dst_port="61009"/>
        </slice>
        <from usec="0" sec="1436245456"/>
        <to usec="0" sec="1436245466"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="135.118.105.42" dst_ip="203.208.234.238" src_port="50341" dst_port="443"/>
        </slice>
        <from usec="0" sec="1436245328"/>
        <to usec="0" sec="1436245688"/>
    </anomaly>
    <anomaly type="notice" value="0.921871,1.435950,010,1 0 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.99.209.49" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245492"/>
        <to usec="0" sec="1436245498"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="128.138.39.138" dst_ip="68.4.33.204" src_port="54372" dst_port="443"/>
        </slice>
        <from usec="0" sec="1436245461"/>
        <to usec="0" sec="1436245497"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,503,1 1 0 0 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="135.111.12.185" dst_ip="29.96.99.152" src_port="47489" dst_port="80"/>
            <filter src_ip="135.111.12.185" dst_ip="29.96.99.152" src_port="44433" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245286"/>
        <to usec="0" sec="1436245288"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,502,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="187.212.29.88" dst_port="22"/>
        </slice>
        <from usec="0" sec="1436245481"/>
        <to usec="0" sec="1436245513"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="135.118.110.99" dst_ip="11.114.187.44" dst_port="80"/>
            <filter src_ip="135.118.110.99" dst_ip="11.213.139.50" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245214"/>
        <to usec="0" sec="1436245499"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,999,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="135.118.58.153" dst_ip="105.165.231.42" src_port="40232" dst_port="25"/>
        </slice>
        <from usec="0" sec="1436245358"/>
        <to usec="0" sec="1436245362"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="135.118.105.72" dst_ip="188.39.191.54" src_port="54971" dst_port="80"/>
            <filter src_ip="135.118.105.72" dst_ip="188.39.191.54" src_port="54744" dst_port="80"/>
            <filter src_ip="135.118.105.72" dst_ip="188.39.191.54" src_port="54740" dst_port="80"/>
            <filter src_ip="135.118.105.72" dst_ip="188.39.191.54" src_port="54527" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245209"/>
        <to usec="0" sec="1436246076"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="165.214.0.29" dst_ip="123.140.91.109" src_port="57163" dst_port="46461"/>
        </slice>
        <from usec="0" sec="1436246040"/>
        <to usec="0" sec="1436246046"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.45.190.58" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436246097"/>
        <to usec="0" sec="1436246100"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="135.118.114.37" dst_ip="62.220.109.61" src_port="63657" dst_port="443"/>
        </slice>
        <from usec="0" sec="1436245985"/>
        <to usec="0" sec="1436246055"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,999,1 1 0 0 0 0 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter src_ip="197.87.229.97" dst_ip="194.180.45.116"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436246075"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="165.214.142.0" dst_ip="62.223.220.206" dst_port="443"/>
        </slice>
        <from usec="0" sec="1436245261"/>
        <to usec="0" sec="1436246003"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="66.143.67.194" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245885"/>
        <to usec="0" sec="1436245903"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="165.214.160.151" dst_ip="212.101.144.156" src_port="50217" dst_port="443"/>
            <filter src_ip="165.214.160.151" dst_ip="212.101.144.156" src_port="50216" dst_port="443"/>
            <filter src_ip="165.214.160.151" dst_ip="212.101.144.156" src_port="50215" dst_port="443"/>
            <filter src_ip="165.214.160.151" dst_ip="67.127.136.101" src_port="50025" dst_port="443"/>
            <filter src_ip="165.214.160.151" dst_ip="47.205.47.99" src_port="50007" dst_port="443"/>
        </slice>
        <from usec="0" sec="1436245997"/>
        <to usec="0" sec="1436246004"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="194.180.47.111" dst_ip="175.225.133.137" dst_port="443"/>
        </slice>
        <from usec="0" sec="1436246039"/>
        <to usec="0" sec="1436246050"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,504,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="128.138.220.10" dst_port="443"/>
        </slice>
        <from usec="0" sec="1436245358"/>
        <to usec="0" sec="1436245454"/>
    </anomaly>
    <anomaly type="notice" value="0.628673,1.305060,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="29.96.106.111" dst_ip="29.96.106.111" proto="tcp"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436246064"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="128.138.124.235" dst_ip="96.142.70.136" src_port="57938" dst_port="443"/>
        </slice>
        <from usec="0" sec="1436245204"/>
        <to usec="0" sec="1436246012"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="135.118.111.159" dst_ip="29.96.97.125" dst_port="443"/>
        </slice>
        <from usec="0" sec="1436245286"/>
        <to usec="0" sec="1436245997"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,503,1 1 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="159.78.110.131" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245451"/>
        <to usec="0" sec="1436245932"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="135.118.106.102" dst_ip="206.160.163.234" src_port="64113" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245274"/>
        <to usec="0" sec="1436245280"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.206.232.163" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245923"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="165.214.2.69" dst_ip="17.165.250.52" dst_port="443"/>
            <filter src_ip="165.214.2.69" dst_ip="17.165.250.74" dst_port="443"/>
        </slice>
        <from usec="0" sec="1436245546"/>
        <to usec="0" sec="1436245751"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="49.171.96.62" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245832"/>
        <to usec="0" sec="1436245843"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="165.214.97.177" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245357"/>
        <to usec="0" sec="1436245697"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,999,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="62.200.20.100" dst_ip="135.111.236.50" src_port="42755" dst_port="25"/>
            <filter src_ip="62.200.20.100" dst_ip="135.111.236.50" src_port="41495" dst_port="25"/>
        </slice>
        <from usec="0" sec="1436245506"/>
        <to usec="0" sec="1436245909"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.111.116.249" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245750"/>
        <to usec="0" sec="1436245764"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="165.214.97.142" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245816"/>
        <to usec="0" sec="1436245824"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.26.202.230" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245321"/>
        <to usec="0" sec="1436245344"/>
    </anomaly>
    <anomaly type="notice" value="0.714858,1.277220,010,1 1 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.94.0.80" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245440"/>
        <to usec="0" sec="1436245455"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.46.229.140" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245841"/>
        <to usec="0" sec="1436245856"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.37.19.63" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245635"/>
        <to usec="0" sec="1436245650"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="188.222.79.97" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245538"/>
        <to usec="0" sec="1436245550"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.115.205.165" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245508"/>
        <to usec="0" sec="1436245524"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="67.114.195.125" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245406"/>
        <to usec="0" sec="1436245427"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="185.152.31.247" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245361"/>
        <to usec="0" sec="1436245368"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.127.135.98" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245604"/>
        <to usec="0" sec="1436245619"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="180.96.162.124" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245306"/>
        <to usec="0" sec="1436245311"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="188.42.35.242" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245943"/>
        <to usec="0" sec="1436245956"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="193.131.235.34" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245687"/>
        <to usec="0" sec="1436245704"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.194.105.194" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245892"/>
        <to usec="0" sec="1436245904"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="184.253.241.7" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245658"/>
        <to usec="0" sec="1436245675"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.174.5.190" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245755"/>
        <to usec="0" sec="1436245781"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,504,1 1 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="165.214.3.254" dst_port="443"/>
            <filter dst_ip="20.207.32.253" dst_port="443"/>
            <filter src_ip="165.214.3.254" dst_ip="20.207.32.253" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245456"/>
        <to usec="0" sec="1436245881"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.39.155.24" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436246088"/>
        <to usec="0" sec="1436246100"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="184.193.204.93" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245904"/>
        <to usec="0" sec="1436245923"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.200.134.128" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436246037"/>
        <to usec="0" sec="1436246049"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.115.222.100" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436246057"/>
        <to usec="0" sec="1436246071"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,504,1 1 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="165.214.177.21" dst_port="443"/>
            <filter src_ip="165.214.2.98" dst_ip="197.54.85.122" dst_port="443"/>
        </slice>
        <from usec="0" sec="1436245209"/>
        <to usec="0" sec="1436245738"/>
    </anomaly>
    <anomaly type="notice" value="0.833862,1.312300,010,1 1 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="64.139.160.144" src_port="12200" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245247"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.189.223.130" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245821"/>
        <to usec="0" sec="1436245832"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="100.224.154.82" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245908"/>
        <to usec="0" sec="1436245922"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="54.180.246.226" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245610"/>
        <to usec="0" sec="1436245626"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,999,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="62.200.20.126" dst_ip="135.111.157.225" src_port="52767" dst_port="25"/>
        </slice>
        <from usec="0" sec="1436245724"/>
        <to usec="0" sec="1436245727"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.192.200.174" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245267"/>
        <to usec="0" sec="1436245284"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="135.118.58.73" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245547"/>
        <to usec="0" sec="1436245654"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="38.177.11.13" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245544"/>
        <to usec="0" sec="1436245552"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.201.15.86" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245582"/>
        <to usec="0" sec="1436245596"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.228.249.1" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245217"/>
        <to usec="0" sec="1436245235"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="184.111.223.95" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245372"/>
        <to usec="0" sec="1436245382"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.39.179.154" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245882"/>
        <to usec="0" sec="1436245887"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="184.208.24.24" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245487"/>
        <to usec="0" sec="1436245517"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="100.247.141.122" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245461"/>
        <to usec="0" sec="1436245481"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.128.17.192" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245483"/>
        <to usec="0" sec="1436245507"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.154.132.199" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245912"/>
        <to usec="0" sec="1436245943"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="184.4.51.120" dst_port="445"/>
        </slice>
        <from usec="0" sec="1436245487"/>
        <to usec="0" sec="1436245524"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.35.14.96" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245306"/>
        <to usec="0" sec="1436245309"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.226.176.224" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245382"/>
        <to usec="0" sec="1436245396"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="90.158.40.244" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245435"/>
        <to usec="0" sec="1436245459"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.115.216.199" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245421"/>
        <to usec="0" sec="1436245437"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.39.61.1" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245378"/>
        <to usec="0" sec="1436245391"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="215.132.59.192" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245542"/>
        <to usec="0" sec="1436245561"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="103.179.90.211" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245215"/>
        <to usec="0" sec="1436245221"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="215.195.141.191" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245985"/>
        <to usec="0" sec="1436245997"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="49.177.75.196" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245233"/>
        <to usec="0" sec="1436245237"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="123.142.205.148" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245364"/>
        <to usec="0" sec="1436245370"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.26.162.153" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245516"/>
        <to usec="0" sec="1436245520"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="214.251.86.111" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245539"/>
        <to usec="0" sec="1436245560"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="211.94.167.38" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245658"/>
        <to usec="0" sec="1436245679"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.29.169.213" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436246079"/>
        <to usec="0" sec="1436246092"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.94.182.98" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436246051"/>
        <to usec="0" sec="1436246075"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.98.170.219" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245210"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="127.50.182.187" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245492"/>
        <to usec="0" sec="1436245516"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="165.214.239.191" dst_ip="178.136.132.199" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245261"/>
        <to usec="0" sec="1436245264"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="90.56.250.126" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245497"/>
        <to usec="0" sec="1436245510"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="214.21.249.118" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436246017"/>
        <to usec="0" sec="1436246022"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.168.223.74" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436246075"/>
        <to usec="0" sec="1436246087"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="45.102.144.98" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245456"/>
        <to usec="0" sec="1436245472"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.249.122.175" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245782"/>
        <to usec="0" sec="1436245800"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="169.105.88.97" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245361"/>
        <to usec="0" sec="1436245374"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="100.226.202.130" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245982"/>
        <to usec="0" sec="1436245986"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.89.149.91" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245790"/>
        <to usec="0" sec="1436245802"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="184.160.163.155" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245278"/>
        <to usec="0" sec="1436245295"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.218.168.8" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245260"/>
        <to usec="0" sec="1436245285"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.16.149.126" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245695"/>
        <to usec="0" sec="1436245720"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="90.19.169.193" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245484"/>
        <to usec="0" sec="1436245496"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="0.50.223.183" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245648"/>
        <to usec="0" sec="1436245672"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.32.243.53" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245416"/>
        <to usec="0" sec="1436245436"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.46.177.15" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245414"/>
        <to usec="0" sec="1436245434"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.115.38.241" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245996"/>
        <to usec="0" sec="1436246002"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.114.66.126" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245934"/>
        <to usec="0" sec="1436245949"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.204.253.70" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245206"/>
        <to usec="0" sec="1436245210"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="66.16.123.179" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436246058"/>
        <to usec="0" sec="1436246070"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.117.79.20" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245337"/>
        <to usec="0" sec="1436245361"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="87.13.69.121" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245989"/>
        <to usec="0" sec="1436246007"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="135.118.115.12" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245992"/>
        <to usec="0" sec="1436246006"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="176.33.120.193" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245320"/>
        <to usec="0" sec="1436245333"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="192.216.220.11" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245545"/>
        <to usec="0" sec="1436245557"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="206.119.136.229" dst_port="25"/>
        </slice>
        <from usec="0" sec="1436245294"/>
        <to usec="0" sec="1436245296"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.44.176.240" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436246017"/>
        <to usec="0" sec="1436246029"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="127.252.44.68" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245204"/>
        <to usec="0" sec="1436245222"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.214.123.174" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245246"/>
        <to usec="0" sec="1436245263"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.114.229.85" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245529"/>
        <to usec="0" sec="1436245544"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="176.107.144.60" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245961"/>
        <to usec="0" sec="1436245977"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.226.15.171" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436246062"/>
        <to usec="0" sec="1436246079"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="64.132.235.161" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436246007"/>
        <to usec="0" sec="1436246023"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="127.50.188.27" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245997"/>
        <to usec="0" sec="1436246003"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="210.20.182.203" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245859"/>
        <to usec="0" sec="1436245871"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="66.145.53.229" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245505"/>
        <to usec="0" sec="1436245509"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="69.120.32.247" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245403"/>
        <to usec="0" sec="1436245415"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.16.15.6" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245399"/>
        <to usec="0" sec="1436245410"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="55.102.186.46" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436246048"/>
        <to usec="0" sec="1436246060"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.205.35.153" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245412"/>
        <to usec="0" sec="1436245422"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.16.209.130" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245384"/>
        <to usec="0" sec="1436245404"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.39.178.14" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245459"/>
        <to usec="0" sec="1436245472"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.120.11.179" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245212"/>
        <to usec="0" sec="1436245219"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="100.250.183.48" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245472"/>
        <to usec="0" sec="1436245490"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="87.186.156.98"/>
        </slice>
        <from usec="0" sec="1436245607"/>
        <to usec="0" sec="1436245633"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="124.35.14.96"/>
        </slice>
        <from usec="0" sec="1436245306"/>
        <to usec="0" sec="1436245311"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="180.96.162.124"/>
        </slice>
        <from usec="0" sec="1436245306"/>
        <to usec="0" sec="1436245312"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="89.194.173.74"/>
        </slice>
        <from usec="0" sec="1436245251"/>
        <to usec="0" sec="1436245252"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="116.115.38.241"/>
        </slice>
        <from usec="0" sec="1436245997"/>
        <to usec="0" sec="1436246002"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="125.203.128.33"/>
        </slice>
        <from usec="0" sec="1436245779"/>
        <to usec="0" sec="1436245786"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="116.115.215.234"/>
        </slice>
        <from usec="0" sec="1436245487"/>
        <to usec="0" sec="1436245491"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="38.177.11.13"/>
        </slice>
        <from usec="0" sec="1436245543"/>
        <to usec="0" sec="1436245551"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="183.117.79.20"/>
        </slice>
        <from usec="0" sec="1436245337"/>
        <to usec="0" sec="1436245373"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="116.115.200.13"/>
        </slice>
        <from usec="0" sec="1436245827"/>
        <to usec="0" sec="1436245835"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,011,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="205.213.2.30" src_port="23"/>
        </slice>
        <from usec="0" sec="1436245222"/>
        <to usec="0" sec="1436245224"/>
    </anomaly>
    <anomaly type="notice" value="0.592375,1.281880,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="85.154.72.239" dst_ip="195.2.153.143" src_port="61954" dst_port="80"/>
            <filter src_ip="85.154.72.239" dst_ip="195.2.153.143" src_port="61953" dst_port="80"/>
            <filter src_ip="85.154.72.239" dst_ip="195.2.153.143" src_port="61952" dst_port="80"/>
            <filter src_ip="85.154.72.239" dst_ip="195.2.153.143" src_port="61951" dst_port="80"/>
            <filter src_ip="85.154.72.239" dst_ip="195.2.153.143" src_port="61950" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245693"/>
        <to usec="0" sec="1436245696"/>
    </anomaly>
    <anomaly type="notice" value="0.628673,1.305060,010,0 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.153.47.171" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245570"/>
        <to usec="0" sec="1436245581"/>
    </anomaly>
    <anomaly type="notice" value="0.628673,1.305060,010,0 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.99.209.49" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245492"/>
        <to usec="0" sec="1436245498"/>
    </anomaly>
    <anomaly type="notice" value="0.945605,1.456680,010,0 0 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="64.139.162.13" src_port="12200" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1436245307"/>
        <to usec="0" sec="1436245311"/>
    </anomaly>
    <anomaly type="notice" value="0.714858,1.277220,503,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="194.180.47.244" src_port="7000"/>
            <filter dst_ip="194.180.47.244" src_port="80"/>
            <filter dst_ip="194.180.47.244" dst_port="123"/>
            <filter dst_ip="194.180.34.54" src_port="7000"/>
            <filter dst_ip="194.180.34.54" src_port="80"/>
            <filter dst_ip="194.180.34.54" dst_port="123"/>
            <filter src_port="7000" dst_port="123"/>
            <filter src_port="80" dst_port="123"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436246093"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,010,0 0 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.224.159.1"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245309"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="103.184.251.0"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245309"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="200.32.85.0"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245265"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="213.36.89.192"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245309"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="135.118.251.15"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245304"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="135.118.174.141"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245309"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="205.100.187.6"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245309"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="135.118.114.79"/>
        </slice>
        <from usec="0" sec="1436245202"/>
        <to usec="0" sec="1436245302"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="195.15.198.67"/>
        </slice>
        <from usec="0" sec="1436245202"/>
        <to usec="0" sec="1436245302"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="165.214.243.155"/>
        </slice>
        <from usec="0" sec="1436245202"/>
        <to usec="0" sec="1436245306"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="65.223.213.124"/>
        </slice>
        <from usec="0" sec="1436245203"/>
        <to usec="0" sec="1436245398"/>
    </anomaly>
    <anomaly type="notice" value="0.575393,1.264940,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="195.15.197.109" dst_ip="29.96.106.77" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245204"/>
        <to usec="0" sec="1436245708"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="47.244.195.32"/>
        </slice>
        <from usec="0" sec="1436245204"/>
        <to usec="0" sec="1436245776"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="177.249.210.229"/>
        </slice>
        <from usec="0" sec="1436245211"/>
        <to usec="0" sec="1436245309"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="86.173.135.165"/>
        </slice>
        <from usec="0" sec="1436245215"/>
        <to usec="0" sec="1436245382"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="194.180.42.87"/>
        </slice>
        <from usec="0" sec="1436245220"/>
        <to usec="0" sec="1436245306"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="96.25.145.179"/>
        </slice>
        <from usec="0" sec="1436245405"/>
        <to usec="0" sec="1436245550"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="165.214.3.53"/>
        </slice>
        <from usec="0" sec="1436245224"/>
        <to usec="0" sec="1436245285"/>
    </anomaly>
    <anomaly type="notice" value="0.575393,1.264940,010,1 0 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="89.194.173.74" dst_port="23"/>
        </slice>
        <from usec="0" sec="1436245245"/>
        <to usec="0" sec="1436245257"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="62.220.51.195"/>
        </slice>
        <from usec="0" sec="1436245256"/>
        <to usec="0" sec="1436245307"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="195.15.197.227"/>
        </slice>
        <from usec="0" sec="1436245258"/>
        <to usec="0" sec="1436245309"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="98.13.210.207"/>
        </slice>
        <from usec="0" sec="1436245259"/>
        <to usec="0" sec="1436245268"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="91.207.177.153"/>
        </slice>
        <from usec="0" sec="1436245271"/>
        <to usec="0" sec="1436245309"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="214.31.235.38"/>
        </slice>
        <from usec="0" sec="1436245296"/>
        <to usec="0" sec="1436245306"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436246029"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="29.96.99.174"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245395"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="194.180.37.101"/>
        </slice>
        <from usec="0" sec="1436245238"/>
        <to usec="0" sec="1436245369"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="107.185.216.191"/>
        </slice>
        <from usec="0" sec="1436245312"/>
        <to usec="0" sec="1436245324"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="14.152.192.73"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245476"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="135.118.104.158"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245489"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="35.144.187.14"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245489"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="165.214.3.134"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245487"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="165.214.65.41"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245486"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="180.32.255.219"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245463"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="175.251.236.85"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245346"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="195.137.182.36"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245849"/>
    </anomaly>
    <anomaly type="notice" value="0.575393,1.264940,504,1 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="197.156.112.119" dst_port="443"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436246076"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="165.214.239.184"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245471"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="62.129.201.103"/>
        </slice>
        <from usec="0" sec="1436245202"/>
        <to usec="0" sec="1436245392"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="165.214.1.67"/>
        </slice>
        <from usec="0" sec="1436245202"/>
        <to usec="0" sec="1436245483"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="14.164.235.49"/>
        </slice>
        <from usec="0" sec="1436245202"/>
        <to usec="0" sec="1436245938"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="165.214.3.199"/>
        </slice>
        <from usec="0" sec="1436245203"/>
        <to usec="0" sec="1436245442"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="111.10.176.70"/>
        </slice>
        <from usec="0" sec="1436245205"/>
        <to usec="0" sec="1436245469"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="20.94.251.254"/>
        </slice>
        <from usec="0" sec="1436245205"/>
        <to usec="0" sec="1436245429"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="207.23.100.10"/>
        </slice>
        <from usec="0" sec="1436245205"/>
        <to usec="0" sec="1436245483"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="165.214.141.9"/>
        </slice>
        <from usec="0" sec="1436245206"/>
        <to usec="0" sec="1436245485"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="135.118.174.209"/>
        </slice>
        <from usec="0" sec="1436245207"/>
        <to usec="0" sec="1436245488"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="128.138.25.6"/>
        </slice>
        <from usec="0" sec="1436245208"/>
        <to usec="0" sec="1436245669"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="105.249.67.251"/>
        </slice>
        <from usec="0" sec="1436245208"/>
        <to usec="0" sec="1436245475"/>
    </anomaly>
    <anomaly type="notice" value="0.575393,1.264940,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="165.214.236.79" dst_ip="195.3.132.143" dst_port="80"/>
            <filter src_ip="165.214.236.79" dst_ip="195.3.132.251" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245209"/>
        <to usec="0" sec="1436245489"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="67.126.69.69"/>
        </slice>
        <from usec="0" sec="1436245217"/>
        <to usec="0" sec="1436245456"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="135.118.58.9"/>
        </slice>
        <from usec="0" sec="1436245218"/>
        <to usec="0" sec="1436245456"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="156.52.31.47"/>
        </slice>
        <from usec="0" sec="1436245224"/>
        <to usec="0" sec="1436245462"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="195.15.199.108"/>
        </slice>
        <from usec="0" sec="1436245225"/>
        <to usec="0" sec="1436245456"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="94.178.221.195"/>
        </slice>
        <from usec="0" sec="1436245231"/>
        <to usec="0" sec="1436245469"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="135.118.26.77"/>
        </slice>
        <from usec="0" sec="1436245233"/>
        <to usec="0" sec="1436245482"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="195.49.31.43"/>
        </slice>
        <from usec="0" sec="1436245234"/>
        <to usec="0" sec="1436245447"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="128.138.122.19"/>
        </slice>
        <from usec="0" sec="1436245234"/>
        <to usec="0" sec="1436245470"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="111.88.124.11"/>
        </slice>
        <from usec="0" sec="1436245235"/>
        <to usec="0" sec="1436245484"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="135.118.26.255"/>
        </slice>
        <from usec="0" sec="1436245252"/>
        <to usec="0" sec="1436245381"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="210.25.191.83"/>
        </slice>
        <from usec="0" sec="1436245258"/>
        <to usec="0" sec="1436245384"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="218.119.67.145"/>
        </slice>
        <from usec="0" sec="1436245263"/>
        <to usec="0" sec="1436245406"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="105.234.164.23"/>
        </slice>
        <from usec="0" sec="1436245293"/>
        <to usec="0" sec="1436245353"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="111.219.158.214"/>
        </slice>
        <from usec="0" sec="1436245303"/>
        <to usec="0" sec="1436245313"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.138.42.196"/>
        </slice>
        <from usec="0" sec="1436245327"/>
        <to usec="0" sec="1436245489"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="93.25.43.16"/>
        </slice>
        <from usec="0" sec="1436245330"/>
        <to usec="0" sec="1436245488"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="197.78.181.182"/>
        </slice>
        <from usec="0" sec="1436245331"/>
        <to usec="0" sec="1436245343"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="17.164.219.3"/>
        </slice>
        <from usec="0" sec="1436245340"/>
        <to usec="0" sec="1436245667"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="214.61.54.138"/>
        </slice>
        <from usec="0" sec="1436245374"/>
        <to usec="0" sec="1436245464"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.41.217.92"/>
        </slice>
        <from usec="0" sec="1436245376"/>
        <to usec="0" sec="1436245378"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="20.117.208.40"/>
        </slice>
        <from usec="0" sec="1436245411"/>
        <to usec="0" sec="1436245485"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="86.173.199.243"/>
        </slice>
        <from usec="0" sec="1436245414"/>
        <to usec="0" sec="1436245430"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="85.164.25.206"/>
        </slice>
        <from usec="0" sec="1436245416"/>
        <to usec="0" sec="1436245434"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="210.32.231.235"/>
        </slice>
        <from usec="0" sec="1436245431"/>
        <to usec="0" sec="1436245486"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="211.140.148.89"/>
        </slice>
        <from usec="0" sec="1436245448"/>
        <to usec="0" sec="1436245478"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="38.71.29.207"/>
        </slice>
        <from usec="0" sec="1436245483"/>
        <to usec="0" sec="1436245489"/>
    </anomaly>
    <anomaly type="notice" value="0.575393,1.264940,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="207.138.78.201" dst_ip="135.111.176.49" src_port="80"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245549"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="165.214.130.80"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245578"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="135.111.115.175"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245577"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="190.69.133.132"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245577"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="62.206.81.182"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245578"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="62.149.74.93"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245579"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="214.85.72.10"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245579"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="99.186.40.206"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245578"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="128.138.114.96" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245579"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="165.214.141.58"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245578"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="201.175.219.20"/>
        </slice>
        <from usec="0" sec="1436245202"/>
        <to usec="0" sec="1436245557"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="128.138.91.35"/>
        </slice>
        <from usec="0" sec="1436245203"/>
        <to usec="0" sec="1436245578"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="111.10.176.42"/>
        </slice>
        <from usec="0" sec="1436245204"/>
        <to usec="0" sec="1436245556"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="67.127.135.149"/>
        </slice>
        <from usec="0" sec="1436245205"/>
        <to usec="0" sec="1436245579"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="195.15.223.62"/>
        </slice>
        <from usec="0" sec="1436245205"/>
        <to usec="0" sec="1436245579"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="128.138.20.218"/>
        </slice>
        <from usec="0" sec="1436245207"/>
        <to usec="0" sec="1436245577"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,053,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="165.214.3.172"/>
        </slice>
        <from usec="0" sec="1436245208"/>
        <to usec="0" sec="1436245566"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="213.100.195.31"/>
        </slice>
        <from usec="0" sec="1436245208"/>
        <to usec="0" sec="1436245575"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="115.240.211.140"/>
        </slice>
        <from usec="0" sec="1436245227"/>
        <to usec="0" sec="1436245562"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="123.84.223.245"/>
        </slice>
        <from usec="0" sec="1436245256"/>
        <to usec="0" sec="1436245579"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="199.252.47.229"/>
        </slice>
        <from usec="0" sec="1436245263"/>
        <to usec="0" sec="1436245579"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,054,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="17.188.100.34"/>
        </slice>
        <from usec="0" sec="1436245286"/>
        <to usec="0" sec="1436245554"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="174.222.144.98"/>
        </slice>
        <from usec="0" sec="1436245341"/>
        <to usec="0" sec="1436245578"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,054,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="20.94.229.223"/>
        </slice>
        <from usec="0" sec="1436245357"/>
        <to usec="0" sec="1436245476"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.138.47.144"/>
        </slice>
        <from usec="0" sec="1436245395"/>
        <to usec="0" sec="1436245463"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="82.86.70.181"/>
        </slice>
        <from usec="0" sec="1436245415"/>
        <to usec="0" sec="1436245433"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="95.216.255.24"/>
        </slice>
        <from usec="0" sec="1436245425"/>
        <to usec="0" sec="1436245579"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="111.71.236.83"/>
        </slice>
        <from usec="0" sec="1436245451"/>
        <to usec="0" sec="1436245513"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="135.118.118.131"/>
        </slice>
        <from usec="0" sec="1436245461"/>
        <to usec="0" sec="1436245578"/>
    </anomaly>
    <anomaly type="notice" value="0.575393,1.264940,999,1 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="165.214.49.17" dst_port="993"/>
            <filter dst_ip="165.214.49.17" dst_port="443"/>
        </slice>
        <from usec="0" sec="1436245237"/>
        <to usec="0" sec="1436245611"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="175.195.124.17"/>
        </slice>
        <from usec="0" sec="1436245487"/>
        <to usec="0" sec="1436245576"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="222.38.88.60"/>
        </slice>
        <from usec="0" sec="1436245488"/>
        <to usec="0" sec="1436245573"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="62.183.13.124"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245652"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="109.224.228.103"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245668"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="54.246.53.239"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245663"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="103.29.70.243"/>
        </slice>
        <from usec="0" sec="1436245202"/>
        <to usec="0" sec="1436245651"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="207.138.78.212"/>
        </slice>
        <from usec="0" sec="1436245203"/>
        <to usec="0" sec="1436245667"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="165.214.203.57"/>
        </slice>
        <from usec="0" sec="1436245203"/>
        <to usec="0" sec="1436245662"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="135.118.108.60"/>
        </slice>
        <from usec="0" sec="1436245203"/>
        <to usec="0" sec="1436245655"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="96.142.70.37"/>
        </slice>
        <from usec="0" sec="1436245205"/>
        <to usec="0" sec="1436245668"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="128.138.21.110"/>
        </slice>
        <from usec="0" sec="1436245205"/>
        <to usec="0" sec="1436245660"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="135.192.198.197"/>
        </slice>
        <from usec="0" sec="1436245205"/>
        <to usec="0" sec="1436245656"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="79.156.65.180"/>
        </slice>
        <from usec="0" sec="1436245206"/>
        <to usec="0" sec="1436245662"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="220.224.189.15"/>
        </slice>
        <from usec="0" sec="1436245210"/>
        <to usec="0" sec="1436245661"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="62.134.233.45"/>
        </slice>
        <from usec="0" sec="1436245218"/>
        <to usec="0" sec="1436245658"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="62.183.71.222"/>
        </slice>
        <from usec="0" sec="1436245220"/>
        <to usec="0" sec="1436245663"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="1.72.41.123"/>
        </slice>
        <from usec="0" sec="1436245228"/>
        <to usec="0" sec="1436245655"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="0.245.224.92"/>
        </slice>
        <from usec="0" sec="1436245313"/>
        <to usec="0" sec="1436245646"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="25.131.115.94"/>
        </slice>
        <from usec="0" sec="1436245350"/>
        <to usec="0" sec="1436245580"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="165.135.99.18"/>
        </slice>
        <from usec="0" sec="1436245358"/>
        <to usec="0" sec="1436245667"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="203.202.25.146"/>
        </slice>
        <from usec="0" sec="1436245365"/>
        <to usec="0" sec="1436245659"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="195.124.3.94"/>
        </slice>
        <from usec="0" sec="1436245367"/>
        <to usec="0" sec="1436245619"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="220.129.36.232"/>
        </slice>
        <from usec="0" sec="1436245448"/>
        <to usec="0" sec="1436245662"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="62.220.197.8"/>
        </slice>
        <from usec="0" sec="1436245460"/>
        <to usec="0" sec="1436245654"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="58.100.6.45"/>
        </slice>
        <from usec="0" sec="1436245205"/>
        <to usec="0" sec="1436245636"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="151.60.79.242"/>
        </slice>
        <from usec="0" sec="1436245206"/>
        <to usec="0" sec="1436245753"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="165.214.219.143"/>
        </slice>
        <from usec="0" sec="1436245217"/>
        <to usec="0" sec="1436245748"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="86.184.83.158"/>
        </slice>
        <from usec="0" sec="1436245237"/>
        <to usec="0" sec="1436245759"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="128.138.149.105"/>
        </slice>
        <from usec="0" sec="1436245237"/>
        <to usec="0" sec="1436245729"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="25.131.27.63"/>
        </slice>
        <from usec="0" sec="1436245465"/>
        <to usec="0" sec="1436245649"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="195.28.125.63"/>
        </slice>
        <from usec="0" sec="1436245555"/>
        <to usec="0" sec="1436245710"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="62.220.14.158"/>
        </slice>
        <from usec="0" sec="1436245597"/>
        <to usec="0" sec="1436245611"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="95.128.26.188"/>
        </slice>
        <from usec="0" sec="1436245630"/>
        <to usec="0" sec="1436245749"/>
    </anomaly>
    <anomaly type="notice" value="0.575393,1.264940,504,1 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="165.214.240.54" dst_ip="203.252.106.85" dst_port="443"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436246099"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="128.138.77.104" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245848"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="195.15.81.1"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245849"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="165.214.100.18"/>
        </slice>
        <from usec="0" sec="1436245202"/>
        <to usec="0" sec="1436245848"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,011,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="48.232.79.81"/>
        </slice>
        <from usec="0" sec="1436245203"/>
        <to usec="0" sec="1436245821"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.113.176.158"/>
        </slice>
        <from usec="0" sec="1436245203"/>
        <to usec="0" sec="1436245820"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="213.227.77.49"/>
        </slice>
        <from usec="0" sec="1436245205"/>
        <to usec="0" sec="1436245838"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="180.3.202.182"/>
        </slice>
        <from usec="0" sec="1436245206"/>
        <to usec="0" sec="1436245849"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="165.214.239.132"/>
        </slice>
        <from usec="0" sec="1436245206"/>
        <to usec="0" sec="1436245849"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="165.214.81.49"/>
        </slice>
        <from usec="0" sec="1436245211"/>
        <to usec="0" sec="1436245820"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="123.84.221.243"/>
        </slice>
        <from usec="0" sec="1436245244"/>
        <to usec="0" sec="1436245849"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="165.214.237.116"/>
        </slice>
        <from usec="0" sec="1436245253"/>
        <to usec="0" sec="1436245800"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="44.17.64.136"/>
        </slice>
        <from usec="0" sec="1436245255"/>
        <to usec="0" sec="1436245839"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="128.138.232.85"/>
        </slice>
        <from usec="0" sec="1436245494"/>
        <to usec="0" sec="1436245845"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="70.198.57.230"/>
        </slice>
        <from usec="0" sec="1436245506"/>
        <to usec="0" sec="1436245676"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="116.148.125.156"/>
        </slice>
        <from usec="0" sec="1436245569"/>
        <to usec="0" sec="1436245849"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="100.230.193.122"/>
        </slice>
        <from usec="0" sec="1436245646"/>
        <to usec="0" sec="1436245844"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="175.237.104.183"/>
        </slice>
        <from usec="0" sec="1436245669"/>
        <to usec="0" sec="1436245829"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="85.131.237.1"/>
        </slice>
        <from usec="0" sec="1436245721"/>
        <to usec="0" sec="1436245831"/>
    </anomaly>
    <anomaly type="notice" value="0.714858,1.277220,999,1 1 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="129.106.212.73" dst_port="25"/>
        </slice>
        <from usec="0" sec="1436245251"/>
        <to usec="0" sec="1436245918"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="164.10.61.82"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245939"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="135.118.57.171"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245936"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="222.69.169.246"/>
        </slice>
        <from usec="0" sec="1436245203"/>
        <to usec="0" sec="1436245939"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="17.164.218.72"/>
        </slice>
        <from usec="0" sec="1436245203"/>
        <to usec="0" sec="1436245792"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="62.148.200.14"/>
        </slice>
        <from usec="0" sec="1436245204"/>
        <to usec="0" sec="1436245939"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="128.138.24.239"/>
        </slice>
        <from usec="0" sec="1436245205"/>
        <to usec="0" sec="1436245925"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.138.183.36"/>
        </slice>
        <from usec="0" sec="1436245207"/>
        <to usec="0" sec="1436245939"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="128.138.142.142"/>
        </slice>
        <from usec="0" sec="1436245213"/>
        <to usec="0" sec="1436245939"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="135.118.115.26"/>
        </slice>
        <from usec="0" sec="1436245221"/>
        <to usec="0" sec="1436245932"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="125.40.161.233"/>
        </slice>
        <from usec="0" sec="1436245320"/>
        <to usec="0" sec="1436245932"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="62.231.34.7"/>
        </slice>
        <from usec="0" sec="1436245413"/>
        <to usec="0" sec="1436245922"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="123.40.147.114"/>
        </slice>
        <from usec="0" sec="1436245502"/>
        <to usec="0" sec="1436245924"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="92.63.44.216"/>
        </slice>
        <from usec="0" sec="1436245544"/>
        <to usec="0" sec="1436245848"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.41.76.82"/>
        </slice>
        <from usec="0" sec="1436245548"/>
        <to usec="0" sec="1436245938"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="212.64.32.19"/>
        </slice>
        <from usec="0" sec="1436245558"/>
        <to usec="0" sec="1436245923"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="165.214.58.155"/>
        </slice>
        <from usec="0" sec="1436245615"/>
        <to usec="0" sec="1436245907"/>
    </anomaly>
    <anomaly type="notice" value="0.714858,1.277220,504,1 1 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="135.118.115.253" dst_ip="175.225.148.131" dst_port="443"/>
            <filter src_ip="135.118.115.253" dst_ip="175.225.148.132" dst_port="443"/>
        </slice>
        <from usec="0" sec="1436245638"/>
        <to usec="0" sec="1436245858"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="195.165.111.144"/>
        </slice>
        <from usec="0" sec="1436245648"/>
        <to usec="0" sec="1436245800"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="103.29.67.158"/>
        </slice>
        <from usec="0" sec="1436245666"/>
        <to usec="0" sec="1436245828"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="186.51.171.212"/>
        </slice>
        <from usec="0" sec="1436245709"/>
        <to usec="0" sec="1436245800"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="139.173.215.17"/>
        </slice>
        <from usec="0" sec="1436245732"/>
        <to usec="0" sec="1436245769"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="178.45.94.119"/>
        </slice>
        <from usec="0" sec="1436245755"/>
        <to usec="0" sec="1436245787"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.179.2.219"/>
        </slice>
        <from usec="0" sec="1436245756"/>
        <to usec="0" sec="1436245826"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="135.118.109.32"/>
        </slice>
        <from usec="0" sec="1436245771"/>
        <to usec="0" sec="1436245816"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="206.156.234.126"/>
        </slice>
        <from usec="0" sec="1436245775"/>
        <to usec="0" sec="1436245776"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="93.24.223.152"/>
        </slice>
        <from usec="0" sec="1436245789"/>
        <to usec="0" sec="1436245862"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="135.118.105.214"/>
        </slice>
        <from usec="0" sec="1436245821"/>
        <to usec="0" sec="1436245934"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter src_ip="222.211.165.181"/>
        </slice>
        <from usec="0" sec="1436245830"/>
        <to usec="0" sec="1436245904"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="206.254.164.240"/>
        </slice>
        <from usec="0" sec="1436245842"/>
        <to usec="0" sec="1436245856"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="105.249.55.182"/>
        </slice>
        <from usec="0" sec="1436245850"/>
        <to usec="0" sec="1436245863"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="77.39.250.179"/>
        </slice>
        <from usec="0" sec="1436245860"/>
        <to usec="0" sec="1436245875"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.138.37.61"/>
        </slice>
        <from usec="0" sec="1436245925"/>
        <to usec="0" sec="1436245938"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="155.202.212.98"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436246029"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="180.33.199.135"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436246029"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="134.3.174.113"/>
        </slice>
        <from usec="0" sec="1436245202"/>
        <to usec="0" sec="1436246029"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="90.235.104.212"/>
        </slice>
        <from usec="0" sec="1436245202"/>
        <to usec="0" sec="1436246027"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="207.23.100.13"/>
        </slice>
        <from usec="0" sec="1436245202"/>
        <to usec="0" sec="1436246027"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,020,0 0 0 1 0 0 0 0 0 0 0 0,hostout">
        <slice>
            <filter src_ip="95.132.177.102"/>
        </slice>
        <from usec="0" sec="1436245203"/>
        <to usec="0" sec="1436245968"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACKt">
        <slice>
            <filter src_ip="128.138.47.174"/>
        </slice>
        <from usec="0" sec="1436245208"/>
        <to usec="0" sec="1436246021"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="135.118.31.101"/>
        </slice>
        <from usec="0" sec="1436245228"/>
        <to usec="0" sec="1436246024"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="135.118.110.136"/>
        </slice>
        <from usec="0" sec="1436245335"/>
        <to usec="0" sec="1436246020"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="165.135.99.116"/>
        </slice>
        <from usec="0" sec="1436245833"/>
        <to usec="0" sec="1436245953"/>
    </anomaly>
    <anomaly type="notice" value="0.612698,1.288420,010,0 0 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="219.29.108.62"/>
        </slice>
        <from usec="0" sec="1436245969"/>
        <to usec="0" sec="1436246029"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="82.117.242.83"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245247"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="174.180.87.108"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245247"/>
    </anomaly>
    <anomaly type="notice" value="0.848420,1.318690,999,0 0 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="135.111.188.111" dst_port="62279"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245793"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="194.180.39.220" src_port="53"/>
            <filter src_ip="201.87.61.233" dst_ip="194.180.39.220" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245247"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="194.180.38.144" dst_ip="194.253.24.196" src_port="31415"/>
            <filter src_ip="194.180.43.13" dst_ip="194.253.24.196" src_port="31415"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245247"/>
    </anomaly>
    <anomaly type="notice" value="0.848420,1.318690,503,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="137.114.41.1" src_port="80"/>
            <filter dst_ip="151.95.92.93" src_port="80"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245745"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="159.78.35.29" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245247"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="159.78.218.190" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245247"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="159.78.104.73" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245247"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="159.78.104.72" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245247"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="64.139.160.144" src_port="12200" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245247"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.210.40.33" src_port="48952" dst_port="8080"/>
            <filter src_ip="48.210.40.33" src_port="48952" dst_port="8118"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436245292"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.221.10.9" src_port="21188"/>
        </slice>
        <from usec="0" sec="1436245246"/>
        <to usec="0" sec="1436245292"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.210.40.33" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1436245426"/>
        <to usec="0" sec="1436245472"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.210.40.33" dst_port="8118"/>
        </slice>
        <from usec="0" sec="1436245426"/>
        <to usec="0" sec="1436245472"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.210.40.33" dst_port="8123"/>
        </slice>
        <from usec="0" sec="1436245426"/>
        <to usec="0" sec="1436245472"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.210.40.33" dst_port="8888"/>
        </slice>
        <from usec="0" sec="1436245426"/>
        <to usec="0" sec="1436245472"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.210.40.33" dst_port="9064"/>
        </slice>
        <from usec="0" sec="1436245426"/>
        <to usec="0" sec="1436245472"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="186.49.65.153" dst_port="161"/>
        </slice>
        <from usec="0" sec="1436245426"/>
        <to usec="0" sec="1436245472"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.206.144.130" dst_port="22"/>
        </slice>
        <from usec="0" sec="1436245426"/>
        <to usec="0" sec="1436245472"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.206.144.131" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1436245426"/>
        <to usec="0" sec="1436245472"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.206.144.129" dst_port="8090"/>
        </slice>
        <from usec="0" sec="1436245426"/>
        <to usec="0" sec="1436245472"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="124.221.10.9" src_port="21188" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1436245426"/>
        <to usec="0" sec="1436245517"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="158.105.220.190" src_port="80"/>
        </slice>
        <from usec="0" sec="1436245471"/>
        <to usec="0" sec="1436245517"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="48.210.40.33"/>
        </slice>
        <from usec="0" sec="1436245651"/>
        <to usec="0" sec="1436245697"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="136.179.26.229"/>
        </slice>
        <from usec="0" sec="1436245651"/>
        <to usec="0" sec="1436245697"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="87.93.208.132" src_port="80"/>
        </slice>
        <from usec="0" sec="1436245651"/>
        <to usec="0" sec="1436245697"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="135.118.114.122" src_port="26085"/>
        </slice>
        <from usec="0" sec="1436245651"/>
        <to usec="0" sec="1436245697"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="96.120.127.214"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="116.244.193.107"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="135.111.135.49"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,503,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="194.180.38.145" dst_ip="190.91.92.0"/>
            <filter src_ip="194.180.38.145" dst_port="80"/>
            <filter src_ip="194.180.38.144" dst_ip="190.91.92.0"/>
            <filter src_ip="194.180.38.144" dst_port="80"/>
            <filter dst_ip="190.91.92.0" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="96.120.127.214"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="159.78.26.90" src_port="80"/>
            <filter src_ip="131.53.181.3" dst_ip="159.78.26.90" src_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="124.221.10.9"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.717900,1.300350,020,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="38.143.241.139"/>
        </slice>
        <from usec="0" sec="1436245905"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="151.95.102.214"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.848420,1.318690,504,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="151.60.79.228"/>
            <filter dst_ip="194.180.42.31" src_port="443"/>
            <filter dst_ip="194.180.42.31" src_port="53"/>
        </slice>
        <from usec="0" sec="1436245202"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="87.93.208.132" src_port="80"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="68.240.198.108" src_port="80"/>
        </slice>
        <from usec="0" sec="1436245471"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="159.78.106.17" src_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="198.175.17.0" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="195.2.173.69" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="159.78.31.119" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.821885,1.295750,503,1 0 0 1 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="159.78.108.152" src_port="80"/>
        </slice>
        <from usec="0" sec="1436245201"/>
        <to usec="0" sec="1436246020"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="195.15.219.106" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="135.111.216.224" src_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="195.15.219.108" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="165.214.49.39" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="195.15.222.245" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="195.2.136.20" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="135.111.214.58" src_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="194.180.44.243" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="195.15.207.215" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,rflatDNS">
        <slice>
            <filter dst_ip="165.214.97.142" src_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="194.180.44.238" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,504,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="135.111.137.113" src_port="443"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="194.180.44.235" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="194.180.44.233" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="165.214.234.251" src_port="80"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="159.78.72.48" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="165.214.247.45" src_port="80"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="159.78.54.145" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="194.180.45.44" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="159.78.35.29" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="159.78.29.43" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="159.78.58.170" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="159.78.249.128" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="151.95.82.8" dst_port="80"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,rflatDNS">
        <slice>
            <filter dst_ip="135.111.13.79" src_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.717900,1.300350,504,1 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="217.152.127.224" dst_ip="195.15.81.23" dst_port="443"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436246050"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="159.78.218.190" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="195.15.218.125" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="135.111.13.71" src_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="194.180.45.25" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="159.78.104.73" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="159.78.104.72" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="135.111.149.28" src_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="159.78.104.64" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="194.180.59.6" src_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="135.111.139.103" src_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="159.78.199.204" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="86.173.156.125" dst_ip="165.214.81.226" src_port="80"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="194.180.41.140" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="194.180.42.59" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="159.78.104.44" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="159.78.106.168" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="151.95.28.244" src_port="80"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="195.15.87.54" dst_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="151.95.28.253" src_port="80"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436245967"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="206.35.250.224" dst_ip="135.111.216.230" src_port="53"/>
            <filter src_ip="192.193.158.91" dst_ip="135.111.216.230" src_port="53"/>
        </slice>
        <from usec="0" sec="1436245921"/>
        <to usec="0" sec="1436246012"/>
    </anomaly>
    <anomaly type="notice" value="0.748133,1.323210,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="212.140.99.188"/>
        </slice>
        <from usec="0" sec="1436246011"/>
        <to usec="0" sec="1436246057"/>
    </anomaly>
</admd:annotation>
