<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="suspicious" value="1.340710,1.808140,503,1 0 0 1 0 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="133.194.85.227" dst_port="80"/>
            <filter src_ip="133.194.85.227" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.340710,1.808140,504,1 0 0 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="17.165.134.22" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.450120,1.868000,503,1 0 0 0 0 0 0 0 0 0 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="202.244.32.115" src_port="80"/>
            <filter dst_ip="202.244.32.115" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.741750,1.864100,011,1 0 0 0 0 0 0 0 0 1 1 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="222.125.146.201" src_port="3306" dst_port="6000"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.782420,1.861720,504,1 1 1 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.221.114.18" src_port="443"/>
            <filter dst_ip="163.221.114.18" src_port="80"/>
            <filter dst_ip="163.221.114.18" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.750050,1.854570,504,1 1 0 0 0 0 0 0 0 1 1 0,ntscACK">
        <slice>
            <filter src_ip="202.244.184.76" dst_port="80"/>
            <filter src_ip="202.244.184.76" dst_port="443"/>
            <filter src_ip="202.244.184.76" dst_ip="114.13.181.234" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.401160,1.870600,010,1 1 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="157.122.148.222" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189605"/>
        <to usec="0" sec="1465189651"/>
    </anomaly>
    <anomaly type="suspicious" value="1.734480,1.873820,010,1 1 1 0 0 0 1 0 0 1 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.35.83.11" dst_port="1433"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.441390,1.877700,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.238.190.150" dst_port="4028"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189320"/>
    </anomaly>
    <anomaly type="suspicious" value="1.663490,1.900500,999,1 1 1 1 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.194.128.75" dst_port="53"/>
            <filter src_ip="203.114.144.186" dst_port="53"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189915"/>
    </anomaly>
    <anomaly type="suspicious" value="1.533810,1.912790,503,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter dst_ip="163.221.115.233"/>
            <filter src_ip="120.129.102.21" dst_ip="202.249.187.157" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.441390,1.877700,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.142.133.87" dst_port="23"/>
        </slice>
        <from usec="0" sec="1465189203"/>
        <to usec="0" sec="1465189893"/>
    </anomaly>
    <anomaly type="suspicious" value="1.734480,1.873820,010,1 1 1 0 0 0 1 0 0 1 0 0,ntscSYNt">
        <slice>
            <filter src_ip="185.169.68.33" src_port="26072" dst_port="6379"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.166850,2.188420,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.114.151.251" dst_port="53"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189246"/>
    </anomaly>
    <anomaly type="suspicious" value="2.166850,2.188420,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.114.151.252" dst_port="53"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189246"/>
    </anomaly>
    <anomaly type="suspicious" value="1.572250,2.006220,504,1 1 0 0 0 0 0 0 1 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.194.252.61" dst_port="443"/>
            <filter dst_ip="173.7.148.61" dst_port="443"/>
            <filter dst_ip="173.7.151.123" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189220"/>
        <to usec="0" sec="1465190089"/>
    </anomaly>
    <anomaly type="suspicious" value="2.281220,2.305430,999,0 0 0 0 0 0 0 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.114.155.199" dst_port="53"/>
        </slice>
        <from usec="0" sec="1465189290"/>
        <to usec="0" sec="1465189336"/>
    </anomaly>
    <anomaly type="suspicious" value="2.281220,2.305430,999,0 0 0 0 0 0 0 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.114.157.55" dst_port="53"/>
        </slice>
        <from usec="0" sec="1465189290"/>
        <to usec="0" sec="1465189336"/>
    </anomaly>
    <anomaly type="suspicious" value="1.289560,1.890130,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="104.146.111.85"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.289560,1.890130,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="115.198.181.4"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.289560,1.890130,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="125.239.46.210"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.533810,1.912790,503,0 0 0 1 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="133.194.154.112" dst_ip="182.56.13.97" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.289560,1.890130,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="158.181.139.39"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.289560,1.890130,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="182.44.134.181"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.289560,1.890130,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="185.243.133.27"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.289560,1.890130,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="185.174.148.106"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.289560,1.890130,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="191.239.49.13"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.782420,1.861720,010,1 1 1 0 0 0 0 0 0 1 1 0,ntscSYNt">
        <slice>
            <filter src_ip="193.193.224.48" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.289560,1.890130,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="198.72.91.114"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.289560,1.890130,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="200.224.206.248"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.289560,1.890130,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="200.87.28.220"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.289560,1.890130,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="202.244.162.235"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.750050,1.854570,502,1 1 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="116.28.132.83" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.289560,1.890130,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.114.146.30" src_port="2049" dst_port="2049"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.289560,1.890130,010,0 0 0 0 0 0 0 0 0 1 0 0,poscaSYN">
        <slice>
            <filter src_ip="217.183.2.87"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.289560,1.890130,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="222.88.239.88"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.533810,1.912790,504,0 0 0 1 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="23.50.56.100" dst_ip="163.221.147.32" src_port="443" dst_port="58298"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.289560,1.890130,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="69.11.219.176"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.289560,1.890130,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="74.216.238.216"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.450120,1.868000,503,1 0 0 0 0 0 0 0 0 0 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.221.203.72" src_port="80"/>
            <filter dst_ip="163.221.203.72" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.340710,1.808140,504,1 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter dst_ip="17.165.134.20" dst_port="443"/>
            <filter dst_ip="17.170.225.85" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.289560,1.890130,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="202.244.177.18" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.340710,1.808140,503,1 0 0 1 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="202.244.177.5" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.782420,1.861720,999,1 1 1 0 0 0 0 0 0 1 1 0,ipv4gretun">
        <slice>
            <filter src_ip="203.114.150.8" dst_ip="206.35.28.254"/>
            <filter src_ip="203.114.150.8" dst_ip="204.189.46.233"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.300750,1.880730,504,0 1 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="163.221.114.18" dst_ip="208.80.150.11" src_port="56231" dst_port="443"/>
            <filter src_ip="163.221.114.18" dst_ip="208.80.150.11" src_port="56230" dst_port="443"/>
            <filter src_ip="163.221.114.18" dst_ip="208.80.150.11" src_port="56228" dst_port="443"/>
            <filter src_ip="163.221.114.18" dst_ip="208.80.150.11" src_port="56227" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.289560,1.890130,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="46.90.206.232"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.894400,1.965770,503,0 0 0 0 0 0 0 0 0 1 1 0,ptmplaHTTP">
        <slice>
            <filter src_ip="104.184.56.91" dst_ip="163.221.114.188" src_port="80"/>
            <filter src_ip="104.184.56.91" dst_ip="163.221.115.216" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.894400,1.965770,999,0 0 0 0 0 0 0 0 0 1 1 0,ntscACK">
        <slice>
            <filter src_ip="133.194.171.241" src_port="26085"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.741750,1.864100,504,1 0 0 0 0 0 0 0 0 1 1 0,ntscACK">
        <slice>
            <filter src_ip="163.221.123.17" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.741750,1.864100,504,1 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="163.221.115.58" dst_port="80"/>
            <filter src_ip="163.221.115.58" dst_ip="54.26.250.8" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.894400,1.965770,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYNt">
        <slice>
            <filter src_ip="185.200.232.15" dst_port="445"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.894400,1.965770,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="199.193.131.51" dst_ip="163.221.114.211" src_port="80" dst_port="60718"/>
            <filter src_ip="199.193.131.51" dst_ip="163.221.114.211" src_port="80" dst_port="60717"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.894400,1.965770,999,0 0 0 0 0 0 0 0 0 1 1 0,ntscUDP">
        <slice>
            <filter src_ip="203.114.151.251" src_port="53"/>
            <filter src_ip="203.114.151.251" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.894400,1.965770,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="23.90.156.223" dst_ip="163.221.208.225" src_port="443"/>
            <filter src_ip="23.90.156.223" dst_ip="163.221.190.152" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.894400,1.965770,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="52.63.97.230" dst_ip="163.221.113.42" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.894400,1.965770,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="68.232.82.91" dst_ip="202.244.35.208" src_port="80" dst_port="52726"/>
            <filter src_ip="68.232.82.91" dst_ip="202.244.35.208" src_port="80" dst_port="52721"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="4.225540,2.906030,503,1 1 1 1 1 0 1 1 1 1 1 1,mptmp">
        <slice>
            <filter dst_port="80"/>
            <filter src_ip="202.244.32.234" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="5.172140,3.683430,503,1 1 1 1 1 1 1 1 1 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="202.70.144.53" src_port="80"/>
            <filter dst_ip="202.70.144.53" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.858300,2.307640,504,1 1 1 1 0 0 1 1 1 1 0 0,mptmp">
        <slice>
            <filter src_ip="133.219.89.245" dst_ip="31.105.71.247"/>
            <filter src_ip="133.219.89.245" dst_port="443"/>
            <filter dst_ip="31.105.71.247" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.955920,2.753140,504,1 1 1 1 1 0 1 0 1 1 1 1,mptmp">
        <slice>
            <filter src_ip="202.249.144.141"/>
            <filter dst_port="443"/>
            <filter dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.475170,2.043220,503,1 1 1 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="163.221.198.62" dst_ip="91.23.94.22"/>
            <filter src_ip="163.221.198.62" dst_port="80"/>
            <filter src_ip="163.221.198.62" dst_port="443"/>
            <filter dst_ip="91.23.94.22" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.966380,1.884720,503,1 1 1 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter dst_port="80"/>
            <filter dst_ip="173.7.148.23" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.945630,2.381510,504,1 1 1 1 1 0 0 0 0 1 1 0,ntscACK">
        <slice>
            <filter src_ip="203.114.152.127" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.611800,2.515070,503,1 1 1 1 0 0 1 1 1 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="203.114.150.156" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.536740,2.286260,504,1 1 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="31.105.66.196" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189205"/>
        <to usec="0" sec="1465190100"/>
    </anomaly>
    <anomaly type="anomalous" value="2.588770,2.057750,503,1 1 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_port="80"/>
            <filter dst_ip="204.210.2.43" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="5.172140,3.683430,503,1 1 1 1 1 1 1 1 1 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="202.244.32.234" src_port="80"/>
            <filter dst_ip="202.244.32.234" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.714020,2.283070,504,1 1 0 0 0 0 1 1 1 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.114.152.127" src_port="80"/>
            <filter dst_ip="203.114.152.127" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.515040,2.497890,503,1 1 1 0 0 0 1 1 1 1 1 1,alphflHTTP">
        <slice>
            <filter src_ip="52.203.178.102" dst_ip="203.114.155.208" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.611800,2.515070,504,1 1 1 1 0 0 1 1 1 1 1 1,mptmp">
        <slice>
            <filter src_ip="192.233.210.230" src_port="443"/>
            <filter dst_ip="202.244.32.115" src_port="80"/>
            <filter dst_ip="202.244.32.115" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="4.517490,3.387680,504,1 1 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="113.25.73.178" dst_port="53413"/>
            <filter dst_ip="202.244.179.177" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.412500,2.322600,999,1 1 1 1 1 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.160.129.232" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1465189786"/>
        <to usec="0" sec="1465189811"/>
    </anomaly>
    <anomaly type="anomalous" value="1.923030,1.896670,502,1 1 1 1 0 0 1 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="116.28.132.83" dst_port="22"/>
            <filter src_ip="222.125.183.231" src_port="6000" dst_port="2222"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.559180,2.292070,999,1 1 1 0 0 0 1 1 1 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="202.244.180.244" dst_port="43611"/>
            <filter src_ip="118.241.90.96" dst_ip="202.244.180.244" src_port="80"/>
        </slice>
        <from usec="0" sec="1465189203"/>
        <to usec="0" sec="1465190093"/>
    </anomaly>
    <anomaly type="anomalous" value="3.611800,2.515070,503,1 1 1 1 0 0 1 1 1 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="202.249.187.157" src_port="80"/>
            <filter dst_ip="202.249.187.157" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.610770,2.064200,010,1 1 1 1 0 0 0 0 0 1 1 1,ntscSYNt">
        <slice>
            <filter src_ip="202.26.112.78" src_port="6000" dst_port="3306"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="4.514270,3.392910,999,1 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="203.114.158.196" dst_ip="45.191.228.221"/>
            <filter src_ip="203.114.158.196" src_port="3001"/>
            <filter dst_ip="45.191.228.221" src_port="3001"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.928020,2.144240,999,1 1 1 1 0 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="78.27.123.158" dst_port="53413"/>
            <filter src_ip="46.161.212.7" src_port="43917" dst_port="3389"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.669210,2.305020,999,1 1 0 1 0 0 1 1 1 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.114.153.148" dst_ip="217.192.55.90" dst_port="3303"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465190054"/>
    </anomaly>
    <anomaly type="anomalous" value="4.720080,3.440900,010,1 1 1 1 1 1 1 0 0 1 1 1,ntscSYNt">
        <slice>
            <filter src_ip="121.172.239.246" src_port="9090" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="4.720080,3.440900,010,1 1 1 1 1 1 1 0 0 1 1 1,ntscSYNt">
        <slice>
            <filter src_ip="222.125.146.201" src_port="6000" dst_port="3306"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.583170,2.066340,503,1 0 0 1 0 0 0 0 0 1 1 1,ntscACK">
        <slice>
            <filter src_ip="163.221.114.180" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.496370,2.406810,504,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.194.219.0" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189254"/>
        <to usec="0" sec="1465189291"/>
    </anomaly>
    <anomaly type="anomalous" value="2.496370,2.406810,504,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.194.221.215" dst_ip="198.98.8.22" dst_port="443"/>
            <filter src_ip="133.194.221.215" dst_ip="17.153.222.120" dst_port="993"/>
        </slice>
        <from usec="0" sec="1465189277"/>
        <to usec="0" sec="1465189308"/>
    </anomaly>
    <anomaly type="anomalous" value="2.496370,2.406810,503,0 0 0 1 1 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="163.221.192.160" dst_ip="66.238.253.49" dst_port="80"/>
        </slice>
        <from usec="0" sec="1465189201"/>
        <to usec="0" sec="1465189577"/>
    </anomaly>
    <anomaly type="anomalous" value="4.514270,3.392910,503,1 0 0 1 1 1 0 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="163.221.114.180" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="4.514270,3.392910,999,1 0 0 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="203.114.158.196" dst_port="3001"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.496370,2.406810,999,0 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.77.159.222" dst_port="5223"/>
            <filter src_ip="157.77.159.222" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189201"/>
        <to usec="0" sec="1465189908"/>
    </anomaly>
    <anomaly type="anomalous" value="2.496370,2.406810,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.219.49.92" dst_ip="17.138.29.38" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189205"/>
        <to usec="0" sec="1465190021"/>
    </anomaly>
    <anomaly type="anomalous" value="4.575340,3.449810,503,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="17.250.30.195" src_port="80"/>
            <filter dst_ip="163.221.114.176" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.833110,2.309550,504,1 0 0 1 0 0 1 1 1 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.114.144.226" src_port="53"/>
            <filter dst_ip="203.114.144.226" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="4.720080,3.440900,010,1 1 1 1 1 1 1 0 0 1 1 1,ntscSYNt">
        <slice>
            <filter src_ip="183.127.179.166" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.638400,2.377360,010,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.52.209.149" dst_port="54748"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189336"/>
    </anomaly>
    <anomaly type="anomalous" value="2.638400,2.377360,010,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.52.209.141" dst_port="54756"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189336"/>
    </anomaly>
    <anomaly type="anomalous" value="2.446040,2.045390,504,1 0 0 0 0 0 0 0 0 1 1 1,ntscACK">
        <slice>
            <filter src_ip="192.233.142.56" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.766000,2.395410,502,0 0 0 1 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="116.28.132.83" src_port="22"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465189577"/>
    </anomaly>
    <anomaly type="anomalous" value="2.638400,2.377360,020,0 0 0 0 0 0 1 1 1 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="163.221.6.29"/>
        </slice>
        <from usec="0" sec="1465189290"/>
        <to usec="0" sec="1465189336"/>
    </anomaly>
    <anomaly type="anomalous" value="2.638400,2.377360,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.108.18.22" dst_port="31065"/>
        </slice>
        <from usec="0" sec="1465189290"/>
        <to usec="0" sec="1465189336"/>
    </anomaly>
    <anomaly type="anomalous" value="3.494590,2.499660,504,1 0 0 0 0 0 1 1 1 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.221.115.232" src_port="80"/>
            <filter dst_ip="163.221.115.232" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.638400,2.377360,999,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.249.148.4" src_port="53"/>
            <filter src_ip="116.24.34.163" dst_ip="202.249.148.4" dst_port="25"/>
        </slice>
        <from usec="0" sec="1465189290"/>
        <to usec="0" sec="1465189336"/>
    </anomaly>
    <anomaly type="anomalous" value="2.809260,2.374290,504,0 0 0 0 0 0 1 1 1 1 0 0,mptp">
        <slice>
            <filter dst_ip="202.249.144.141" src_port="443"/>
            <filter dst_ip="202.249.144.141" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.638400,2.377360,010,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.215.66.73" dst_port="50348"/>
        </slice>
        <from usec="0" sec="1465189290"/>
        <to usec="0" sec="1465189336"/>
    </anomaly>
    <anomaly type="anomalous" value="2.638400,2.377360,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.114.146.194" dst_port="53"/>
        </slice>
        <from usec="0" sec="1465189290"/>
        <to usec="0" sec="1465189336"/>
    </anomaly>
    <anomaly type="anomalous" value="2.638400,2.377360,010,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.215.66.57" dst_port="50356"/>
        </slice>
        <from usec="0" sec="1465189290"/>
        <to usec="0" sec="1465189336"/>
    </anomaly>
    <anomaly type="anomalous" value="2.531020,2.294000,504,1 0 0 0 0 0 1 1 1 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.221.113.170" dst_ip="54.63.99.17" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189290"/>
        <to usec="0" sec="1465189336"/>
    </anomaly>
    <anomaly type="anomalous" value="2.638400,2.377360,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.114.144.244" src_port="53"/>
        </slice>
        <from usec="0" sec="1465189290"/>
        <to usec="0" sec="1465189336"/>
    </anomaly>
    <anomaly type="anomalous" value="2.638400,2.377360,010,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.52.208.238" dst_port="54756"/>
        </slice>
        <from usec="0" sec="1465189290"/>
        <to usec="0" sec="1465189336"/>
    </anomaly>
    <anomaly type="anomalous" value="2.638400,2.377360,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.244.178.118" dst_port="33434"/>
            <filter dst_ip="202.244.178.118" dst_port="33435"/>
            <filter dst_ip="202.244.178.118"/>
        </slice>
        <from usec="0" sec="1465189290"/>
        <to usec="0" sec="1465189336"/>
    </anomaly>
    <anomaly type="anomalous" value="2.638400,2.377360,999,0 0 0 0 0 0 1 1 1 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="54.3.47.244" dst_ip="203.114.152.74" src_port="53"/>
        </slice>
        <from usec="0" sec="1465189290"/>
        <to usec="0" sec="1465189336"/>
    </anomaly>
    <anomaly type="anomalous" value="2.663770,2.312700,504,1 0 0 1 0 0 1 1 1 0 0 0,mptmp">
        <slice>
            <filter src_ip="157.77.37.245" dst_ip="31.105.64.63"/>
            <filter src_ip="157.77.37.245" dst_port="443"/>
            <filter dst_ip="31.105.64.63" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465190084"/>
    </anomaly>
    <anomaly type="anomalous" value="2.638400,2.377360,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.244.167.207" src_port="53"/>
        </slice>
        <from usec="0" sec="1465189290"/>
        <to usec="0" sec="1465189336"/>
    </anomaly>
    <anomaly type="anomalous" value="2.638400,2.377360,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.221.39.219" src_port="53"/>
        </slice>
        <from usec="0" sec="1465189290"/>
        <to usec="0" sec="1465189336"/>
    </anomaly>
    <anomaly type="anomalous" value="2.638400,2.377360,010,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.215.65.213" dst_port="50348"/>
        </slice>
        <from usec="0" sec="1465189290"/>
        <to usec="0" sec="1465189336"/>
    </anomaly>
    <anomaly type="anomalous" value="2.531020,2.294000,999,1 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.114.151.252" dst_port="53"/>
        </slice>
        <from usec="0" sec="1465189290"/>
        <to usec="0" sec="1465189336"/>
    </anomaly>
    <anomaly type="anomalous" value="2.638400,2.377360,010,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.215.65.188" dst_port="50356"/>
        </slice>
        <from usec="0" sec="1465189290"/>
        <to usec="0" sec="1465189336"/>
    </anomaly>
    <anomaly type="anomalous" value="2.638400,2.377360,999,0 0 0 0 0 0 1 1 1 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.194.131.129" dst_ip="173.13.188.41" src_port="25"/>
        </slice>
        <from usec="0" sec="1465189290"/>
        <to usec="0" sec="1465189336"/>
    </anomaly>
    <anomaly type="anomalous" value="2.638400,2.377360,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.114.144.186" src_port="53"/>
        </slice>
        <from usec="0" sec="1465189290"/>
        <to usec="0" sec="1465189336"/>
    </anomaly>
    <anomaly type="anomalous" value="2.638400,2.377360,011,0 0 0 0 0 0 1 1 1 0 0 0,ntscTCPRSTrp">
        <slice>
            <filter dst_ip="104.224.213.25" dst_port="5900"/>
            <filter dst_ip="104.224.213.25" dst_port="22"/>
        </slice>
        <from usec="0" sec="1465189290"/>
        <to usec="0" sec="1465189336"/>
    </anomaly>
    <anomaly type="anomalous" value="2.638400,2.377360,010,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.52.208.243" dst_port="54748"/>
        </slice>
        <from usec="0" sec="1465189290"/>
        <to usec="0" sec="1465189336"/>
    </anomaly>
    <anomaly type="anomalous" value="2.638400,2.377360,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.114.144.245" src_port="53"/>
        </slice>
        <from usec="0" sec="1465189290"/>
        <to usec="0" sec="1465189336"/>
    </anomaly>
    <anomaly type="anomalous" value="2.197680,2.118010,503,1 0 0 1 0 0 1 1 0 0 0 0,mptmp">
        <slice>
            <filter dst_port="80"/>
            <filter dst_ip="173.7.148.61" dst_port="443"/>
        </slice>
        <from usec="0" sec="1465189200"/>
        <to usec="0" sec="1465190097"/>
    </anomaly>
    <anomaly type="anomalous" value="2.475170,2.043220,504,1 1 1 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="163.221.172.223" dst_ip="54.26.250.8" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.446040,2.045390,011,1 0 0 0 0 0 0 0 0 1 1 1,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="222.125.183.231" src_port="2222" dst_port="6000"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="4.575340,3.449810,504,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="103.9.17.71" dst_ip="163.221.123.17"/>
            <filter src_ip="103.9.17.71" src_port="443"/>
            <filter src_ip="103.9.17.71" src_port="80"/>
            <filter dst_ip="163.221.123.17" src_port="443"/>
            <filter dst_ip="163.221.123.17" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.556990,2.138460,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.221.115.231" src_port="80"/>
            <filter dst_ip="163.221.115.231" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.242110,2.057790,010,1 1 1 0 0 0 1 0 0 0 0 1,ptmpHTTP">
        <slice>
            <filter src_ip="51.5.218.33" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.392910,2.520660,503,1 1 0 1 1 0 0 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="203.114.150.156" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.807790,2.124050,999,1 1 1 0 0 0 1 0 0 1 1 1,ntscUDP">
        <slice>
            <filter src_ip="193.193.225.70" src_port="38060" dst_port="111"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.014290,1.972800,504,1 0 0 0 0 0 0 0 0 1 0 1,mptp">
        <slice>
            <filter dst_ip="203.114.145.186" src_port="443"/>
            <filter src_ip="23.95.58.165" dst_ip="203.114.145.186" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="5.172140,3.683430,503,1 1 1 1 1 1 1 1 1 1 1 1,ptmplaHTTP">
        <slice>
            <filter src_ip="203.114.155.208" dst_ip="52.203.178.102" src_port="80"/>
            <filter src_ip="203.114.155.208" dst_ip="199.193.35.153" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.446040,2.045390,503,1 0 0 0 0 0 0 0 0 1 1 1,salphfl">
        <slice>
            <filter src_ip="133.194.155.219" dst_ip="50.169.210.13" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.556990,2.138460,503,0 0 0 0 0 0 0 0 0 1 1 1,mptplaHTTP">
        <slice>
            <filter dst_ip="195.67.116.246" src_port="53"/>
            <filter src_ip="133.194.130.80" dst_ip="195.67.116.246" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.475170,2.043220,999,1 1 1 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="36.248.5.80" dst_ip="203.114.151.206" dst_port="123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.556990,2.138460,503,0 0 0 0 0 0 0 0 0 1 1 1,alphflHTTP">
        <slice>
            <filter src_ip="133.194.82.212" dst_ip="96.206.121.214" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
