<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="suspicious" value="1.931360,2.458980,504,1 1 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="49.15.221.212" dst_port="443"/>
        </slice>
        <from usec="0" sec="1444453202"/>
        <to usec="0" sec="1444454082"/>
    </anomaly>
    <anomaly type="suspicious" value="2.398480,2.443780,503,1 0 0 1 0 0 1 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="207.76.251.147" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.562080,2.284260,503,1 1 1 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="152.135.60.180" dst_ip="170.142.102.69" src_port="80" dst_port="58277"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.562080,2.284260,504,1 1 1 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="173.88.82.86" src_port="80"/>
            <filter src_ip="116.94.150.109" dst_ip="173.88.82.86" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.801190,2.437340,504,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="74.91.93.93" dst_port="443"/>
            <filter dst_ip="49.15.219.47" dst_port="443"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444454101"/>
    </anomaly>
    <anomaly type="suspicious" value="1.977470,2.457770,020,1 1 1 1 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="82.182.219.181"/>
        </slice>
        <from usec="0" sec="1444453359"/>
        <to usec="0" sec="1444453858"/>
    </anomaly>
    <anomaly type="suspicious" value="1.916860,2.539190,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="110.48.136.79"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444453308"/>
    </anomaly>
    <anomaly type="suspicious" value="1.916860,2.539190,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="76.12.138.254"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444453307"/>
    </anomaly>
    <anomaly type="suspicious" value="1.916860,2.539190,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="140.61.240.51"/>
        </slice>
        <from usec="0" sec="1444453263"/>
        <to usec="0" sec="1444453308"/>
    </anomaly>
    <anomaly type="suspicious" value="1.916860,2.539190,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="170.142.85.62"/>
        </slice>
        <from usec="0" sec="1444453202"/>
        <to usec="0" sec="1444453488"/>
    </anomaly>
    <anomaly type="suspicious" value="1.916860,2.539190,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="207.0.199.217"/>
        </slice>
        <from usec="0" sec="1444453230"/>
        <to usec="0" sec="1444453484"/>
    </anomaly>
    <anomaly type="suspicious" value="1.916860,2.539190,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="213.27.10.51"/>
        </slice>
        <from usec="0" sec="1444453358"/>
        <to usec="0" sec="1444453374"/>
    </anomaly>
    <anomaly type="suspicious" value="1.916860,2.539190,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="74.105.160.130"/>
        </slice>
        <from usec="0" sec="1444453205"/>
        <to usec="0" sec="1444453578"/>
    </anomaly>
    <anomaly type="suspicious" value="1.916860,2.539190,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="218.65.200.224"/>
        </slice>
        <from usec="0" sec="1444453251"/>
        <to usec="0" sec="1444453559"/>
    </anomaly>
    <anomaly type="suspicious" value="1.916860,2.539190,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="180.67.214.118"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444453838"/>
    </anomaly>
    <anomaly type="suspicious" value="1.916860,2.539190,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="102.110.86.28"/>
        </slice>
        <from usec="0" sec="1444453202"/>
        <to usec="0" sec="1444454028"/>
    </anomaly>
    <anomaly type="suspicious" value="1.920120,2.479370,999,1 0 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="185.246.177.29" src_port="53"/>
            <filter dst_ip="185.246.177.29"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444453921"/>
    </anomaly>
    <anomaly type="suspicious" value="1.657040,2.308630,503,1 1 0 0 0 0 1 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="206.208.208.56" src_port="80"/>
            <filter dst_ip="206.208.208.56" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.640110,2.393880,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="110.38.94.59"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.640110,2.393880,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="97.189.202.47"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.640110,2.393880,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="215.216.141.168"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.640110,2.393880,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="9.89.136.247" src_port="25571"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.640110,2.393880,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="86.63.62.92"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.640110,2.393880,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="173.88.118.50" src_port="80"/>
            <filter dst_ip="173.88.118.50" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.782090,2.415920,999,0 0 0 0 0 0 1 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="185.246.128.227" dst_port="6881"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.640110,2.393880,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="159.59.229.26" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.782090,2.415920,999,0 0 0 0 0 0 1 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="206.208.96.6" src_port="53"/>
            <filter dst_ip="206.208.96.6" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.640110,2.393880,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="206.208.123.126" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.640110,2.393880,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="15.193.75.76"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.640110,2.393880,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="107.157.36.43"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.449740,2.719090,504,1 1 0 0 0 0 0 0 0 1 1 1,ptmpla">
        <slice>
            <filter src_ip="159.59.228.231" dst_ip="62.22.161.217" dst_port="443"/>
            <filter src_ip="159.59.228.231" dst_ip="62.22.161.151" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="4.372730,3.176320,503,1 1 0 1 1 1 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="207.108.124.131" dst_ip="185.246.248.174" src_port="80" dst_port="51054"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.928980,2.835670,504,1 1 0 1 0 0 1 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="206.218.26.2" dst_port="53"/>
            <filter src_ip="206.218.26.2" dst_port="443"/>
            <filter src_ip="206.218.26.2" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="4.209640,3.219350,010,1 1 1 1 1 1 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="101.7.25.72" src_port="12200" dst_port="443"/>
            <filter src_ip="101.7.25.72" src_port="12200" dst_port="21320"/>
            <filter src_ip="101.7.25.72" src_port="12200" dst_port="80"/>
        </slice>
        <from usec="0" sec="1444453216"/>
        <to usec="0" sec="1444453381"/>
    </anomaly>
    <anomaly type="anomalous" value="3.449740,2.719090,503,1 1 0 0 0 0 0 0 0 1 1 1,mptplaHTTP">
        <slice>
            <filter src_ip="5.35.20.183" dst_ip="185.246.39.18" src_port="80"/>
            <filter src_ip="74.152.164.111" dst_ip="185.246.39.18" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="4.869800,3.256650,503,1 1 1 1 1 1 1 0 0 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="141.154.94.112" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.618030,2.395950,010,1 1 1 0 0 0 1 0 0 1 1 0,ntscSYNt">
        <slice>
            <filter src_ip="222.11.53.70" src_port="6000" dst_port="1433"/>
            <filter src_ip="12.105.252.42" src_port="6000" dst_port="1433"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="5.424730,3.515490,010,1 1 1 1 1 1 1 0 0 1 1 1,ntscSYNt">
        <slice>
            <filter src_ip="218.90.83.73" dst_port="1433"/>
            <filter src_ip="222.11.50.57" src_port="6000" dst_port="5901"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="7.652580,6.763250,010,1 1 1 0 0 0 1 1 0 1 1 0,ntscSYNt">
        <slice>
            <filter src_ip="101.7.30.71" src_port="12200" dst_port="1095"/>
            <filter src_ip="101.7.30.71" src_port="12200" dst_port="1081"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="5.402930,3.572880,504,0 0 0 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="159.59.39.18" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="9.007530,7.235990,999,1 1 1 1 1 1 1 1 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="114.252.199.170" dst_port="22"/>
            <filter src_ip="192.150.205.39" src_port="59954" dst_port="111"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.179140,2.891040,999,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="12.109.53.183" dst_ip="159.59.2.232" src_port="7273" dst_port="7273"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444453398"/>
    </anomaly>
    <anomaly type="anomalous" value="3.179140,2.891040,999,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.88.11.144" dst_ip="53.98.229.118" src_port="25"/>
        </slice>
        <from usec="0" sec="1444453200"/>
        <to usec="0" sec="1444453398"/>
    </anomaly>
    <anomaly type="anomalous" value="5.379760,3.500380,504,1 1 1 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="159.59.99.244"/>
            <filter src_ip="93.29.122.212" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="4.372730,3.176320,503,1 1 0 1 1 1 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="105.150.23.224" dst_ip="206.208.117.203" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="5.402930,3.572880,504,0 0 0 1 1 1 0 0 0 1 1 1,salphfl">
        <slice>
            <filter src_ip="2.27.179.136" dst_ip="206.208.212.20" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="5.424730,3.515490,503,1 1 1 1 1 1 1 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="185.246.183.77" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.544970,2.737420,999,1 1 1 0 0 0 1 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="1.37.205.67" dst_ip="170.148.160.254"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.544970,2.737420,503,1 1 1 0 0 0 1 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="185.246.183.149" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.618030,2.395950,999,1 1 1 0 0 0 1 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="194.168.189.2" dst_ip="207.76.246.244" dst_port="123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="5.424730,3.515490,999,1 1 1 1 1 1 1 0 0 1 1 1,mptpla">
        <slice>
            <filter src_ip="207.76.246.244" dst_ip="194.168.189.2" src_port="123"/>
            <filter src_ip="207.76.244.176" dst_ip="194.168.189.2" src_port="123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.443460,2.737540,503,1 0 0 0 0 0 0 0 0 1 1 1,salphfl">
        <slice>
            <filter src_ip="159.59.99.244" dst_ip="202.226.94.208" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.444630,2.421860,010,1 1 1 1 0 0 1 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="17.32.177.224" src_port="6000" dst_port="3306"/>
            <filter src_ip="57.162.47.50" src_port="5252" dst_port="5060"/>
            <filter src_ip="91.61.190.57" src_port="21188" dst_port="21"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.572560,2.479400,503,0 0 0 0 0 0 0 0 0 1 1 0,mptplaHTTP">
        <slice>
            <filter src_ip="215.200.65.139" dst_ip="206.218.42.59" src_port="80"/>
            <filter src_ip="158.36.77.53" dst_ip="206.218.42.59" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.511520,2.810750,999,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="125.100.141.230" dst_ip="207.76.252.33" dst_port="34832"/>
            <filter src_ip="125.100.141.230" dst_ip="207.76.252.33" dst_port="6881"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.572560,2.479400,503,0 0 0 0 0 0 0 0 0 1 1 0,ptmplaHTTP">
        <slice>
            <filter src_ip="207.108.124.137" dst_ip="173.88.175.174" src_port="80"/>
            <filter src_ip="207.108.124.137" dst_ip="185.246.70.42" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.511520,2.810750,504,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="2.14.199.9" dst_ip="159.59.230.77" src_port="443" dst_port="58504"/>
            <filter src_ip="2.14.199.9" dst_ip="159.59.230.77" src_port="443" dst_port="58503"/>
            <filter src_ip="2.14.199.9" dst_ip="159.59.230.77" src_port="443" dst_port="58502"/>
            <filter src_ip="2.14.199.9" dst_ip="159.59.230.77" src_port="443" dst_port="58501"/>
            <filter src_ip="2.14.199.9" dst_ip="159.59.230.77" src_port="443" dst_port="58500"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.572560,2.479400,503,0 0 0 0 0 0 0 0 0 1 1 0,point_to_point">
        <slice>
            <filter src_ip="79.20.254.54" dst_ip="159.59.18.74" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.572560,2.479400,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="172.106.63.207" src_port="53"/>
            <filter src_ip="185.243.171.29" dst_ip="172.106.63.207" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="4.421640,3.255130,503,0 0 0 1 1 1 0 0 0 1 0 0,point_to_point">
        <slice>
            <filter src_ip="212.153.181.247" dst_ip="159.59.102.219" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.511520,2.810750,999,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="170.142.189.168" dst_ip="46.70.167.92" src_port="56459" dst_port="6360"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="5.404090,3.530620,503,1 0 0 1 1 1 1 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="206.208.208.236" src_port="80"/>
            <filter dst_ip="206.208.208.29" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="5.424730,3.515490,503,1 1 1 1 1 1 1 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="206.218.26.2" src_port="80"/>
            <filter dst_ip="206.218.26.2" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
