<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="113.115.191.130"/>
        </slice>
        <from usec="0" sec="1478840663"/>
        <to usec="0" sec="1478840667"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.37.124.7" dst_ip="168.32.207.16" src_port="2283" dst_port="59588" proto="udp"/>
        </slice>
        <from usec="0" sec="1478840423"/>
        <to usec="0" sec="1478840424"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.44.112.7" dst_ip="151.122.238.79" src_port="17828" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478841085"/>
        <to usec="0" sec="1478841088"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="64.35.225.240" dst_ip="163.37.116.11" src_port="80" dst_port="55786" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478841264"/>
        <to usec="0" sec="1478841298"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.139.240.113"/>
        </slice>
        <from usec="0" sec="1478841000"/>
        <to usec="0" sec="1478841147"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.37.126.13" dst_ip="120.136.163.0" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840819"/>
        <to usec="0" sec="1478840825"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="131.113.94.112" dst_ip="151.122.207.62" src_port="61803" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840508"/>
        <to usec="0" sec="1478840515"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.159.85.110" dst_ip="54.87.54.221" src_port="59459" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478841045"/>
        <to usec="0" sec="1478841124"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.16.173.147"/>
        </slice>
        <from usec="0" sec="1478840599"/>
        <to usec="0" sec="1478840656"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="61.42.119.29" dst_ip="203.177.73.67" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478841246"/>
        <to usec="0" sec="1478841248"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.23.41.148"/>
        </slice>
        <from usec="0" sec="1478841168"/>
        <to usec="0" sec="1478841170"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="164.241.127.27"/>
        </slice>
        <from usec="0" sec="1478840480"/>
        <to usec="0" sec="1478840526"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.37.196.22" dst_ip="31.194.174.49" src_port="56074" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840468"/>
        <to usec="0" sec="1478841013"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="192.234.109.110" dst_ip="163.37.222.116" src_port="80" dst_port="51476" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840724"/>
        <to usec="0" sec="1478840876"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.139.85.237"/>
        </slice>
        <from usec="0" sec="1478840781"/>
        <to usec="0" sec="1478840783"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.44.207.151"/>
        </slice>
        <from usec="0" sec="1478840891"/>
        <to usec="0" sec="1478840894"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="104.202.214.95"/>
        </slice>
        <from usec="0" sec="1478840864"/>
        <to usec="0" sec="1478840867"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.124.63"/>
        </slice>
        <from usec="0" sec="1478840902"/>
        <to usec="0" sec="1478840913"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.139.69.190"/>
        </slice>
        <from usec="0" sec="1478840649"/>
        <to usec="0" sec="1478840653"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.37.125.194"/>
        </slice>
        <from usec="0" sec="1478840476"/>
        <to usec="0" sec="1478840488"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="31.194.172.39" dst_ip="163.37.196.49" src_port="443" dst_port="65410" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840736"/>
        <to usec="0" sec="1478840919"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.37.126.59" dst_ip="17.224.137.17" src_port="62390" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840599"/>
        <to usec="0" sec="1478840601"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.44.196.199"/>
        </slice>
        <from usec="0" sec="1478840978"/>
        <to usec="0" sec="1478840981"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.37.21.217" dst_ip="125.61.171.51" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478841267"/>
        <to usec="0" sec="1478841268"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.37.223.165" dst_port="30303" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840590"/>
        <to usec="0" sec="1478840993"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="52.35.82.58" dst_ip="163.37.234.13" src_port="443" dst_port="52249" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840595"/>
        <to usec="0" sec="1478840596"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="113.213.222.39" dst_ip="203.177.72.204" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840775"/>
        <to usec="0" sec="1478840778"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.139.62.82"/>
        </slice>
        <from usec="0" sec="1478841232"/>
        <to usec="0" sec="1478841240"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.37.129.211" dst_ip="199.128.79.60" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478841079"/>
        <to usec="0" sec="1478841084"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="45.175.29.53" dst_ip="163.37.234.244" src_port="30303" dst_port="55993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840569"/>
        <to usec="0" sec="1478840899"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="45.175.59.179" dst_ip="163.37.255.15" src_port="4500" dst_port="4500" proto="udp"/>
        </slice>
        <from usec="0" sec="1478840569"/>
        <to usec="0" sec="1478841295"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.139.27.171"/>
        </slice>
        <from usec="0" sec="1478840952"/>
        <to usec="0" sec="1478840969"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.45.168"/>
        </slice>
        <from usec="0" sec="1478840655"/>
        <to usec="0" sec="1478840658"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.159.91.40"/>
        </slice>
        <from usec="0" sec="1478841277"/>
        <to usec="0" sec="1478841279"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.126.44"/>
        </slice>
        <from usec="0" sec="1478841252"/>
        <to usec="0" sec="1478841293"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="85.2.1.77" dst_ip="163.37.161.152" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840700"/>
        <to usec="0" sec="1478840714"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.159.79.38"/>
        </slice>
        <from usec="0" sec="1478840965"/>
        <to usec="0" sec="1478841176"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="131.113.216.75" dst_ip="151.122.207.62" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840792"/>
        <to usec="0" sec="1478841214"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="160.146.255.215" dst_ip="163.37.148.162" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840807"/>
        <to usec="0" sec="1478840947"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.131.62"/>
        </slice>
        <from usec="0" sec="1478840431"/>
        <to usec="0" sec="1478841230"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="23.31.124.50" dst_ip="163.37.153.194" src_port="80" dst_port="62249" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840569"/>
        <to usec="0" sec="1478840905"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="157.44.247.212"/>
        </slice>
        <from usec="0" sec="1478841001"/>
        <to usec="0" sec="1478841007"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="89.141.80.185"/>
        </slice>
        <from usec="0" sec="1478840825"/>
        <to usec="0" sec="1478840833"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="125.33.187.188"/>
        </slice>
        <from usec="0" sec="1478840992"/>
        <to usec="0" sec="1478841003"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.11.229.7" dst_ip="202.11.218.153" src_port="49186" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840512"/>
        <to usec="0" sec="1478840515"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="80.208.94.48" dst_ip="163.37.198.98" src_port="1935" dst_port="60974" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478841247"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="182.162.182.143" dst_ip="163.37.126.65" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840710"/>
        <to usec="0" sec="1478840711"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.235.186.136"/>
        </slice>
        <from usec="0" sec="1478841059"/>
        <to usec="0" sec="1478841068"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="219.47.153.207"/>
        </slice>
        <from usec="0" sec="1478841160"/>
        <to usec="0" sec="1478841174"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.159.140.12" dst_ip="107.92.207.55" src_port="49377" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478841141"/>
        <to usec="0" sec="1478841184"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.37.124.75" dst_ip="54.248.107.2" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478841087"/>
        <to usec="0" sec="1478841271"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="131.113.98.55"/>
        </slice>
        <from usec="0" sec="1478841174"/>
        <to usec="0" sec="1478841210"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.159.26.159" dst_ip="107.108.148.79" src_port="80" dst_port="46106" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478841268"/>
        <to usec="0" sec="1478841269"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="144.75.82.160" dst_ip="163.37.223.159" src_port="443" dst_port="49346" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478841267"/>
        <to usec="0" sec="1478841271"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.57.14.85" dst_ip="203.177.64.198" src_port="3154" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840428"/>
        <to usec="0" sec="1478840430"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.79.219"/>
        </slice>
        <from usec="0" sec="1478840578"/>
        <to usec="0" sec="1478840580"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="131.113.250.34" dst_ip="151.122.207.62" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840414"/>
        <to usec="0" sec="1478841195"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.139.26.44" dst_ip="65.164.33.27" src_port="61376" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840498"/>
        <to usec="0" sec="1478840502"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="49.131.85.167"/>
        </slice>
        <from usec="0" sec="1478840412"/>
        <to usec="0" sec="1478840414"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.139.174.127" dst_ip="151.122.238.79" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840628"/>
        <to usec="0" sec="1478840702"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="61.157.185.129"/>
        </slice>
        <from usec="0" sec="1478840411"/>
        <to usec="0" sec="1478841266"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="157.44.166.37" dst_ip="65.164.33.129" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840925"/>
        <to usec="0" sec="1478841231"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="67.204.126.55" dst_ip="163.37.138.250" src_port="80" dst_port="64702" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478841211"/>
        <to usec="0" sec="1478841212"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.44.161.177"/>
        </slice>
        <from usec="0" sec="1478841053"/>
        <to usec="0" sec="1478841056"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.44.37.82"/>
        </slice>
        <from usec="0" sec="1478840643"/>
        <to usec="0" sec="1478841199"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.139.223.149"/>
        </slice>
        <from usec="0" sec="1478840625"/>
        <to usec="0" sec="1478840627"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="68.148.230.105"/>
        </slice>
        <from usec="0" sec="1478840493"/>
        <to usec="0" sec="1478840496"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="183.57.69.176"/>
        </slice>
        <from usec="0" sec="1478840700"/>
        <to usec="0" sec="1478840702"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.139.217.137" dst_ip="107.92.207.57" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478841026"/>
        <to usec="0" sec="1478841031"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.37.233.134" dst_ip="157.72.231.93" src_port="80" dst_port="6161" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478841229"/>
        <to usec="0" sec="1478841231"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.145.230"/>
        </slice>
        <from usec="0" sec="1478841229"/>
        <to usec="0" sec="1478841240"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.2.194.120"/>
        </slice>
        <from usec="0" sec="1478841123"/>
        <to usec="0" sec="1478841129"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.44.238.10"/>
        </slice>
        <from usec="0" sec="1478841163"/>
        <to usec="0" sec="1478841245"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.44.25.146" dst_ip="151.122.238.79" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840493"/>
        <to usec="0" sec="1478840505"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.159.27.153"/>
        </slice>
        <from usec="0" sec="1478840900"/>
        <to usec="0" sec="1478841054"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,011,1 0 0 0 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="126.21.159.96"/>
        </slice>
        <from usec="0" sec="1478840716"/>
        <to usec="0" sec="1478840718"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.132.78.145"/>
        </slice>
        <from usec="0" sec="1478840795"/>
        <to usec="0" sec="1478840803"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="125.44.141.146"/>
        </slice>
        <from usec="0" sec="1478840592"/>
        <to usec="0" sec="1478840596"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.37.208.109" dst_ip="52.210.66.226" src_port="59918" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840431"/>
        <to usec="0" sec="1478840434"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="103.117.242.146"/>
        </slice>
        <from usec="0" sec="1478840695"/>
        <to usec="0" sec="1478840698"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.64.147"/>
        </slice>
        <from usec="0" sec="1478840477"/>
        <to usec="0" sec="1478840480"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.37.153.106" dst_ip="13.108.197.247" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478841146"/>
        <to usec="0" sec="1478841151"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.177.72.93"/>
        </slice>
        <from usec="0" sec="1478840684"/>
        <to usec="0" sec="1478840687"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.4.163"/>
        </slice>
        <from usec="0" sec="1478840566"/>
        <to usec="0" sec="1478840603"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="125.62.83.188" dst_ip="163.37.21.218" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478841247"/>
        <to usec="0" sec="1478841249"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.165.18.184"/>
        </slice>
        <from usec="0" sec="1478840426"/>
        <to usec="0" sec="1478841152"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.139.210.187" dst_ip="151.122.238.79" src_port="60015" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841275"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.37.223.82" dst_ip="17.224.137.17" src_port="55622" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840624"/>
        <to usec="0" sec="1478841173"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.159.75.72" dst_ip="155.36.83.4" src_port="16402" dst_port="49089" proto="udp"/>
        </slice>
        <from usec="0" sec="1478841184"/>
        <to usec="0" sec="1478841189"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="68.148.230.179"/>
        </slice>
        <from usec="0" sec="1478840646"/>
        <to usec="0" sec="1478840658"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.74.158.170"/>
        </slice>
        <from usec="0" sec="1478840639"/>
        <to usec="0" sec="1478840673"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="107.118.22.161" dst_ip="163.37.125.134" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840424"/>
        <to usec="0" sec="1478840486"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.159.74.160"/>
        </slice>
        <from usec="0" sec="1478841213"/>
        <to usec="0" sec="1478841289"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.177.64.199"/>
        </slice>
        <from usec="0" sec="1478841163"/>
        <to usec="0" sec="1478841165"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.37.125.11" dst_ip="67.204.144.214" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478841137"/>
        <to usec="0" sec="1478841140"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.37.248.243"/>
        </slice>
        <from usec="0" sec="1478840739"/>
        <to usec="0" sec="1478840795"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.37.222.208" dst_ip="17.224.137.97" src_port="58261" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840937"/>
        <to usec="0" sec="1478840939"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.44.249.34"/>
        </slice>
        <from usec="0" sec="1478841292"/>
        <to usec="0" sec="1478841300"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="182.172.98.232"/>
        </slice>
        <from usec="0" sec="1478840949"/>
        <to usec="0" sec="1478840951"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.44.41.24"/>
        </slice>
        <from usec="0" sec="1478840405"/>
        <to usec="0" sec="1478840409"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.37.208.18" dst_ip="52.57.126.44" src_port="53898" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840520"/>
        <to usec="0" sec="1478840524"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.11.229"/>
        </slice>
        <from usec="0" sec="1478840877"/>
        <to usec="0" sec="1478841229"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.37.208.21"/>
        </slice>
        <from usec="0" sec="1478841017"/>
        <to usec="0" sec="1478841022"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="49.136.4.255" dst_ip="163.37.161.124" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840786"/>
        <to usec="0" sec="1478840791"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="160.141.94.192" dst_ip="163.37.238.243" src_port="80" dst_port="4065" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840508"/>
        <to usec="0" sec="1478840509"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.159.124.228" dst_ip="185.77.175.70" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840766"/>
        <to usec="0" sec="1478840777"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.37.223.44" dst_ip="17.224.137.97" src_port="57145" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840635"/>
        <to usec="0" sec="1478840925"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="126.41.2.234" dst_ip="203.177.68.71" src_port="64413" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478841035"/>
        <to usec="0" sec="1478841042"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.44.151.207" dst_ip="65.164.33.145" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840643"/>
        <to usec="0" sec="1478840657"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.171.48"/>
        </slice>
        <from usec="0" sec="1478840508"/>
        <to usec="0" sec="1478840512"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.159.77.46" dst_ip="149.57.95.103" src_port="57503" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840916"/>
        <to usec="0" sec="1478841243"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.37.222.227" dst_ip="17.224.137.245" src_port="57679" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840991"/>
        <to usec="0" sec="1478840995"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="126.11.186.232"/>
        </slice>
        <from usec="0" sec="1478840843"/>
        <to usec="0" sec="1478840864"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="98.228.174.235"/>
        </slice>
        <from usec="0" sec="1478841152"/>
        <to usec="0" sec="1478841173"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.159.249.44" dst_port="443"/>
            <filter src_ip="133.159.249.44" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840546"/>
        <to usec="0" sec="1478841182"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.159.171.62" dst_port="443"/>
            <filter dst_ip="52.86.186.123" dst_port="443"/>
            <filter src_ip="133.159.171.62" dst_ip="52.68.218.223" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840422"/>
        <to usec="0" sec="1478840804"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.159.170.113" dst_port="80"/>
            <filter src_ip="133.159.170.113" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840408"/>
        <to usec="0" sec="1478841293"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="107.94.134.119"/>
        </slice>
        <from usec="0" sec="1478840425"/>
        <to usec="0" sec="1478841299"/>
    </anomaly>
    <anomaly type="notice" value="0.859005,1.443940,999,0 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.74.176.119" dst_ip="17.172.159.203" src_port="48214" dst_port="25"/>
            <filter src_ip="130.74.176.119" dst_ip="17.172.159.200" src_port="41098" dst_port="25"/>
            <filter src_ip="130.74.176.119" dst_ip="17.187.33.247" src_port="59330" dst_port="25"/>
            <filter src_ip="130.74.176.119" dst_ip="17.143.163.11" src_port="45828" dst_port="25"/>
        </slice>
        <from usec="0" sec="1478840685"/>
        <to usec="0" sec="1478840737"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.44.35.220" dst_ip="61.2.157.12" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840875"/>
        <to usec="0" sec="1478840947"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.44.65.171" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840427"/>
        <to usec="0" sec="1478841281"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.37.125.38" dst_ip="31.194.172.9"/>
            <filter src_ip="163.37.125.38" dst_ip="157.243.34.107" dst_port="443"/>
            <filter src_ip="133.159.19.180" dst_ip="31.194.172.9" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478841261"/>
        <to usec="0" sec="1478841273"/>
    </anomaly>
    <anomaly type="notice" value="0.655331,1.403870,504,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="157.44.201.194" dst_port="443"/>
            <filter src_ip="133.159.47.89" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840401"/>
        <to usec="0" sec="1478841296"/>
    </anomaly>
    <anomaly type="notice" value="0.655331,1.403870,504,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="17.227.54.238" dst_port="443"/>
            <filter dst_ip="17.180.31.20" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478841300"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="52.203.172.206" dst_port="443"/>
            <filter dst_ip="52.120.143.213" dst_port="443"/>
            <filter dst_ip="54.209.13.152" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840426"/>
        <to usec="0" sec="1478841241"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="95.73.34.19" dst_ip="95.73.34.19" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840459"/>
        <to usec="0" sec="1478840587"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.37.197.17" dst_ip="205.66.93.196" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840428"/>
        <to usec="0" sec="1478841284"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="133.139.169.27" dst_ip="222.248.228.37" dst_port="80"/>
            <filter src_ip="133.139.69.140" dst_ip="222.248.228.37" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840422"/>
        <to usec="0" sec="1478840425"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="13.108.218.76" dst_ip="13.108.218.76" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840443"/>
        <to usec="0" sec="1478841218"/>
    </anomaly>
    <anomaly type="notice" value="0.788914,1.411590,999,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.37.79.163" dst_port="993"/>
        </slice>
        <from usec="0" sec="1478840442"/>
        <to usec="0" sec="1478841285"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="157.243.34.71" dst_ip="157.243.34.71" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840952"/>
        <to usec="0" sec="1478841146"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="31.194.172.52" dst_ip="31.194.172.52" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840551"/>
        <to usec="0" sec="1478841177"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.177.77.58" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840405"/>
        <to usec="0" sec="1478841271"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.139.85.246" dst_ip="65.164.33.68"/>
            <filter src_ip="133.139.85.246" dst_port="80"/>
            <filter src_ip="157.44.115.192" dst_ip="65.164.33.68"/>
            <filter src_ip="157.44.115.192" dst_port="80"/>
            <filter src_ip="133.139.16.181" dst_ip="65.164.33.68"/>
            <filter src_ip="133.139.16.181" dst_port="80"/>
            <filter dst_ip="65.164.33.68" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840815"/>
        <to usec="0" sec="1478841286"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.159.0.176" dst_ip="66.150.221.139" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840458"/>
        <to usec="0" sec="1478841195"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="71.184.167.242"/>
        </slice>
        <from usec="0" sec="1478841029"/>
        <to usec="0" sec="1478841112"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,999,0 0 0 0 0 0 1 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="79.189.30.8" dst_ip="202.11.217.163" dst_port="110"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840446"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.41.123.165"/>
        </slice>
        <from usec="0" sec="1478841297"/>
        <to usec="0" sec="1478841299"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="163.37.3.24" src_port="14758" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840788"/>
        <to usec="0" sec="1478840792"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="163.37.234.220" dst_ip="54.250.196.80" dst_port="443"/>
            <filter src_ip="163.37.234.3" dst_ip="54.250.196.80" dst_port="443"/>
            <filter src_ip="163.37.223.57" dst_ip="54.250.196.80" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="192.25.125.112" dst_ip="192.25.125.112" src_port="55680" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840511"/>
        <to usec="0" sec="1478840671"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.37.181.235" dst_ip="134.104.249.201"/>
            <filter src_ip="163.37.181.235" dst_port="443"/>
            <filter src_ip="163.37.181.235" dst_port="80"/>
            <filter src_ip="163.37.126.235" dst_ip="134.104.249.201"/>
            <filter src_ip="163.37.126.235" dst_port="443"/>
            <filter src_ip="163.37.126.235" dst_port="80"/>
            <filter src_ip="163.37.186.31" dst_ip="134.104.249.201"/>
            <filter src_ip="163.37.186.31" dst_port="443"/>
            <filter dst_ip="134.104.249.201" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840453"/>
        <to usec="0" sec="1478841081"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.223.228" dst_ip="17.227.54.220" dst_port="443"/>
            <filter src_ip="163.37.223.228" dst_ip="17.227.54.163" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478841083"/>
        <to usec="0" sec="1478841085"/>
    </anomaly>
    <anomaly type="notice" value="0.859005,1.443940,503,0 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.159.83.27" dst_ip="192.253.124.83" dst_port="80"/>
            <filter src_ip="133.159.83.27" dst_ip="17.96.7.245" dst_port="993"/>
        </slice>
        <from usec="0" sec="1478840785"/>
        <to usec="0" sec="1478840794"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.53.77" dst_ip="17.227.54.157" dst_port="443"/>
            <filter src_ip="163.37.53.77" dst_ip="17.224.136.14" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840945"/>
        <to usec="0" sec="1478840948"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="65.86.17.84" dst_ip="65.86.17.84" src_port="59102" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840508"/>
        <to usec="0" sec="1478841247"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.248.129.83"/>
        </slice>
        <from usec="0" sec="1478840483"/>
        <to usec="0" sec="1478840485"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="151.122.207.62" dst_ip="151.122.207.62" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840885"/>
        <to usec="0" sec="1478841209"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="151.122.239.1" dst_port="443"/>
            <filter src_ip="157.44.65.167" dst_ip="151.122.239.1" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840410"/>
        <to usec="0" sec="1478841234"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.177.64.202" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840418"/>
        <to usec="0" sec="1478841268"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="157.44.205.76" dst_port="443"/>
            <filter src_ip="163.37.124.151" dst_ip="17.227.54.205" dst_port="443"/>
            <filter src_ip="163.37.124.151" dst_ip="17.227.54.178" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840831"/>
        <to usec="0" sec="1478841006"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.177.77.223" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840504"/>
        <to usec="0" sec="1478841300"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="192.40.141.226" dst_ip="133.78.50.126" src_port="53" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478841278"/>
        <to usec="0" sec="1478841279"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="118.41.95.214" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840777"/>
        <to usec="0" sec="1478840818"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.177.68.106" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840568"/>
        <to usec="0" sec="1478841244"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="220.213.149.56" dst_ip="163.37.154.39" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840604"/>
        <to usec="0" sec="1478840702"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.37.222.81" dst_port="443"/>
            <filter src_ip="133.159.87.246" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478841005"/>
        <to usec="0" sec="1478841099"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="126.29.93.238"/>
        </slice>
        <from usec="0" sec="1478840412"/>
        <to usec="0" sec="1478840414"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="211.158.23.98"/>
        </slice>
        <from usec="0" sec="1478841122"/>
        <to usec="0" sec="1478841124"/>
    </anomaly>
    <anomaly type="notice" value="0.699571,1.394270,503,1 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_port="80"/>
            <filter dst_ip="31.194.164.10" dst_port="443"/>
            <filter dst_ip="31.194.164.39" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840413"/>
        <to usec="0" sec="1478841299"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.44.206.101"/>
        </slice>
        <from usec="0" sec="1478841073"/>
        <to usec="0" sec="1478841122"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.37.126.23" dst_ip="96.129.135.191" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840820"/>
        <to usec="0" sec="1478840825"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="118.104.3.22"/>
        </slice>
        <from usec="0" sec="1478840810"/>
        <to usec="0" sec="1478840812"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="37.112.143.166"/>
        </slice>
        <from usec="0" sec="1478841236"/>
        <to usec="0" sec="1478841239"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.44.246.68"/>
        </slice>
        <from usec="0" sec="1478841294"/>
        <to usec="0" sec="1478841296"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="157.44.202.157" dst_port="443"/>
            <filter src_ip="133.159.87.151" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840425"/>
        <to usec="0" sec="1478841162"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ipv46tun">
        <slice>
            <filter src_ip="149.235.27.83" dst_ip="203.177.76.126"/>
        </slice>
        <from usec="0" sec="1478840573"/>
        <to usec="0" sec="1478840966"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="59.100.221.180"/>
        </slice>
        <from usec="0" sec="1478841242"/>
        <to usec="0" sec="1478841293"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.23.159.214"/>
        </slice>
        <from usec="0" sec="1478841285"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.44.199.0"/>
        </slice>
        <from usec="0" sec="1478840514"/>
        <to usec="0" sec="1478840516"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.44.122.16" dst_port="5223"/>
            <filter src_ip="157.44.122.16" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840642"/>
        <to usec="0" sec="1478840704"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.159.9.160"/>
        </slice>
        <from usec="0" sec="1478840835"/>
        <to usec="0" sec="1478840837"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="133.159.124.37" dst_ip="43.230.215.16" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840410"/>
        <to usec="0" sec="1478841150"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.44.138.151"/>
        </slice>
        <from usec="0" sec="1478840995"/>
        <to usec="0" sec="1478840997"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.9.172"/>
        </slice>
        <from usec="0" sec="1478840914"/>
        <to usec="0" sec="1478840974"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="94.197.216.134"/>
        </slice>
        <from usec="0" sec="1478841201"/>
        <to usec="0" sec="1478841223"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.159.42.149"/>
        </slice>
        <from usec="0" sec="1478841242"/>
        <to usec="0" sec="1478841244"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.44.146.127"/>
        </slice>
        <from usec="0" sec="1478840923"/>
        <to usec="0" sec="1478840926"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="106.126.166.107"/>
        </slice>
        <from usec="0" sec="1478840552"/>
        <to usec="0" sec="1478840554"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="112.76.58.29"/>
        </slice>
        <from usec="0" sec="1478840414"/>
        <to usec="0" sec="1478841017"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.29.57.125"/>
        </slice>
        <from usec="0" sec="1478840825"/>
        <to usec="0" sec="1478840832"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.44.68.130"/>
        </slice>
        <from usec="0" sec="1478840413"/>
        <to usec="0" sec="1478840415"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.139.229.135"/>
        </slice>
        <from usec="0" sec="1478840884"/>
        <to usec="0" sec="1478840887"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="138.106.202.140"/>
        </slice>
        <from usec="0" sec="1478840409"/>
        <to usec="0" sec="1478840411"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="118.16.22.156" dst_ip="202.11.221.10" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478841058"/>
        <to usec="0" sec="1478841061"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="202.11.221.50" dst_ip="203.74.66.242"/>
            <filter src_ip="202.11.221.50" dst_port="80"/>
            <filter src_ip="202.11.221.50" dst_port="443"/>
            <filter dst_ip="203.74.66.242" dst_port="443"/>
            <filter src_ip="163.37.130.119" dst_ip="203.74.66.242" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840431"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="118.8.187.103"/>
        </slice>
        <from usec="0" sec="1478840946"/>
        <to usec="0" sec="1478840948"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="203.177.73.104" dst_ip="198.171.176.216" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840418"/>
        <to usec="0" sec="1478841292"/>
    </anomaly>
    <anomaly type="notice" value="0.655331,1.403870,504,1 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.227.54.158" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840455"/>
        <to usec="0" sec="1478841288"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="126.95.164.155"/>
        </slice>
        <from usec="0" sec="1478840453"/>
        <to usec="0" sec="1478840456"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.140.183"/>
        </slice>
        <from usec="0" sec="1478840974"/>
        <to usec="0" sec="1478841036"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="151.122.239.49" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840433"/>
        <to usec="0" sec="1478841235"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.68.255"/>
        </slice>
        <from usec="0" sec="1478841076"/>
        <to usec="0" sec="1478841078"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.37.21.218" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840597"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="210.217.4.204"/>
        </slice>
        <from usec="0" sec="1478840988"/>
        <to usec="0" sec="1478840992"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="121.193.34.213"/>
        </slice>
        <from usec="0" sec="1478840731"/>
        <to usec="0" sec="1478840736"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.44.152.59" dst_ip="17.187.204.246" src_port="53892" dst_port="993"/>
            <filter src_ip="157.44.152.59" dst_ip="17.187.204.246" src_port="53869" dst_port="993"/>
            <filter src_ip="157.44.152.59" dst_ip="17.187.204.246" src_port="53867" dst_port="993"/>
            <filter src_ip="157.44.152.59" dst_ip="17.187.204.246" src_port="53840" dst_port="993"/>
            <filter src_ip="157.44.152.59" dst_ip="17.187.204.246" src_port="53247" dst_port="993"/>
        </slice>
        <from usec="0" sec="1478840498"/>
        <to usec="0" sec="1478840533"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="122.69.88.57"/>
        </slice>
        <from usec="0" sec="1478840596"/>
        <to usec="0" sec="1478840620"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.159.66.87" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840745"/>
        <to usec="0" sec="1478841030"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="17.172.150.11" dst_ip="17.172.150.11" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840515"/>
        <to usec="0" sec="1478841076"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.37.124.9" dst_ip="180.126.227.228" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840557"/>
        <to usec="0" sec="1478840698"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.37.21.217" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840425"/>
        <to usec="0" sec="1478841287"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="17.186.162.58" dst_port="443"/>
            <filter dst_ip="17.183.192.168" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840424"/>
        <to usec="0" sec="1478841298"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.2.194.68"/>
        </slice>
        <from usec="0" sec="1478840849"/>
        <to usec="0" sec="1478840851"/>
    </anomaly>
    <anomaly type="notice" value="0.699571,1.394270,999,1 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="103.49.139.181" dst_port="123"/>
            <filter src_ip="115.88.200.134" dst_port="123"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="14.18.112.250"/>
        </slice>
        <from usec="0" sec="1478840418"/>
        <to usec="0" sec="1478841256"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="60.92.146.85"/>
        </slice>
        <from usec="0" sec="1478841088"/>
        <to usec="0" sec="1478841090"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.139.89.186"/>
        </slice>
        <from usec="0" sec="1478840447"/>
        <to usec="0" sec="1478840907"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="159.56.100.242"/>
        </slice>
        <from usec="0" sec="1478840403"/>
        <to usec="0" sec="1478840478"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.208.217"/>
        </slice>
        <from usec="0" sec="1478840569"/>
        <to usec="0" sec="1478840572"/>
    </anomaly>
    <anomaly type="notice" value="0.655331,1.403870,504,1 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.177.65.242" src_port="28179"/>
            <filter src_ip="203.177.65.242" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840401"/>
        <to usec="0" sec="1478841265"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.37.144.123" dst_port="80"/>
            <filter src_ip="163.37.144.123" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478841247"/>
        <to usec="0" sec="1478841255"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="124.237.21.149"/>
        </slice>
        <from usec="0" sec="1478840437"/>
        <to usec="0" sec="1478840456"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.37.254.16"/>
        </slice>
        <from usec="0" sec="1478840573"/>
        <to usec="0" sec="1478841144"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="219.122.2.123"/>
        </slice>
        <from usec="0" sec="1478841241"/>
        <to usec="0" sec="1478841246"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.139.115.243"/>
        </slice>
        <from usec="0" sec="1478840858"/>
        <to usec="0" sec="1478840860"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.139.74.183"/>
        </slice>
        <from usec="0" sec="1478840590"/>
        <to usec="0" sec="1478840592"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="106.19.253.145"/>
        </slice>
        <from usec="0" sec="1478841026"/>
        <to usec="0" sec="1478841040"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.44.30.149"/>
        </slice>
        <from usec="0" sec="1478841155"/>
        <to usec="0" sec="1478841157"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="203.180.243.3"/>
        </slice>
        <from usec="0" sec="1478840933"/>
        <to usec="0" sec="1478840935"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.37.222.253"/>
        </slice>
        <from usec="0" sec="1478840743"/>
        <to usec="0" sec="1478840749"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="61.217.110.25" dst_ip="163.37.153.242" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840684"/>
        <to usec="0" sec="1478841206"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="31.194.164.54"/>
        </slice>
        <from usec="0" sec="1478841253"/>
        <to usec="0" sec="1478841255"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="115.47.222.0"/>
        </slice>
        <from usec="0" sec="1478840953"/>
        <to usec="0" sec="1478840955"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.78.63.129"/>
        </slice>
        <from usec="0" sec="1478841235"/>
        <to usec="0" sec="1478841237"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="202.2.249.129" dst_port="53"/>
        </slice>
        <from usec="0" sec="1478840596"/>
        <to usec="0" sec="1478841028"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="125.83.236.1"/>
        </slice>
        <from usec="0" sec="1478840680"/>
        <to usec="0" sec="1478840682"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="67.41.27.129"/>
        </slice>
        <from usec="0" sec="1478840428"/>
        <to usec="0" sec="1478840437"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="54.236.7.124"/>
        </slice>
        <from usec="0" sec="1478840770"/>
        <to usec="0" sec="1478840772"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="175.124.212.3"/>
        </slice>
        <from usec="0" sec="1478840797"/>
        <to usec="0" sec="1478840799"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.74.59.124"/>
        </slice>
        <from usec="0" sec="1478841083"/>
        <to usec="0" sec="1478841088"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="125.98.213.132"/>
        </slice>
        <from usec="0" sec="1478840543"/>
        <to usec="0" sec="1478841284"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="111.243.3.251"/>
        </slice>
        <from usec="0" sec="1478841117"/>
        <to usec="0" sec="1478841120"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="114.237.35.143"/>
        </slice>
        <from usec="0" sec="1478840707"/>
        <to usec="0" sec="1478840709"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="125.83.227.15"/>
        </slice>
        <from usec="0" sec="1478840504"/>
        <to usec="0" sec="1478840506"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.222.115"/>
        </slice>
        <from usec="0" sec="1478840854"/>
        <to usec="0" sec="1478840856"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.17.139"/>
        </slice>
        <from usec="0" sec="1478840655"/>
        <to usec="0" sec="1478840821"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.139.45.244"/>
        </slice>
        <from usec="0" sec="1478840427"/>
        <to usec="0" sec="1478840429"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,011,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="220.138.176.15"/>
        </slice>
        <from usec="0" sec="1478840495"/>
        <to usec="0" sec="1478840497"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACKt">
        <slice>
            <filter src_ip="133.159.66.136"/>
        </slice>
        <from usec="0" sec="1478840695"/>
        <to usec="0" sec="1478841143"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.11.62.9"/>
        </slice>
        <from usec="0" sec="1478840431"/>
        <to usec="0" sec="1478840435"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.139.181.244"/>
        </slice>
        <from usec="0" sec="1478840812"/>
        <to usec="0" sec="1478840814"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.138.6.96"/>
        </slice>
        <from usec="0" sec="1478841209"/>
        <to usec="0" sec="1478841211"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="139.44.153.158"/>
        </slice>
        <from usec="0" sec="1478840888"/>
        <to usec="0" sec="1478840890"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.159.125.108"/>
        </slice>
        <from usec="0" sec="1478840422"/>
        <to usec="0" sec="1478840425"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.67.147"/>
        </slice>
        <from usec="0" sec="1478841140"/>
        <to usec="0" sec="1478841143"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.37.19.103"/>
        </slice>
        <from usec="0" sec="1478840705"/>
        <to usec="0" sec="1478840708"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.223.151"/>
        </slice>
        <from usec="0" sec="1478840507"/>
        <to usec="0" sec="1478840509"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="125.128.243.155"/>
        </slice>
        <from usec="0" sec="1478841161"/>
        <to usec="0" sec="1478841164"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="101.197.9.234"/>
        </slice>
        <from usec="0" sec="1478840874"/>
        <to usec="0" sec="1478840876"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.67.149"/>
        </slice>
        <from usec="0" sec="1478840414"/>
        <to usec="0" sec="1478840417"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.126.24"/>
        </slice>
        <from usec="0" sec="1478840804"/>
        <to usec="0" sec="1478840807"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.139.230.20"/>
        </slice>
        <from usec="0" sec="1478840624"/>
        <to usec="0" sec="1478840626"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="100.51.23.233"/>
        </slice>
        <from usec="0" sec="1478840681"/>
        <to usec="0" sec="1478840683"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.44.248.233"/>
        </slice>
        <from usec="0" sec="1478840855"/>
        <to usec="0" sec="1478840857"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.178.17"/>
        </slice>
        <from usec="0" sec="1478840601"/>
        <to usec="0" sec="1478840963"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="220.140.180.150"/>
        </slice>
        <from usec="0" sec="1478841290"/>
        <to usec="0" sec="1478841292"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="182.144.209.224"/>
        </slice>
        <from usec="0" sec="1478841226"/>
        <to usec="0" sec="1478841228"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,501,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.177.64.31"/>
        </slice>
        <from usec="0" sec="1478840962"/>
        <to usec="0" sec="1478840964"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="202.175.190.23"/>
        </slice>
        <from usec="0" sec="1478840452"/>
        <to usec="0" sec="1478840455"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.159.3.103"/>
        </slice>
        <from usec="0" sec="1478840755"/>
        <to usec="0" sec="1478840772"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="123.161.35.225"/>
        </slice>
        <from usec="0" sec="1478841212"/>
        <to usec="0" sec="1478841214"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.37.223.154"/>
        </slice>
        <from usec="0" sec="1478841292"/>
        <to usec="0" sec="1478841293"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="223.102.232.145"/>
        </slice>
        <from usec="0" sec="1478840836"/>
        <to usec="0" sec="1478840838"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.255.160"/>
        </slice>
        <from usec="0" sec="1478840940"/>
        <to usec="0" sec="1478841009"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="113.85.40.163"/>
        </slice>
        <from usec="0" sec="1478840828"/>
        <to usec="0" sec="1478840830"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="46.3.126.66"/>
        </slice>
        <from usec="0" sec="1478840965"/>
        <to usec="0" sec="1478840967"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="157.44.166.71"/>
        </slice>
        <from usec="0" sec="1478841231"/>
        <to usec="0" sec="1478841234"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.159.79.59"/>
        </slice>
        <from usec="0" sec="1478840426"/>
        <to usec="0" sec="1478840428"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.139.178.111" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840807"/>
        <to usec="0" sec="1478841266"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.222.91"/>
        </slice>
        <from usec="0" sec="1478841143"/>
        <to usec="0" sec="1478841298"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.139.16.40"/>
        </slice>
        <from usec="0" sec="1478840454"/>
        <to usec="0" sec="1478840456"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.37.34.80"/>
        </slice>
        <from usec="0" sec="1478840519"/>
        <to usec="0" sec="1478840521"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="146.134.39.215"/>
        </slice>
        <from usec="0" sec="1478841052"/>
        <to usec="0" sec="1478841054"/>
    </anomaly>
    <anomaly type="notice" value="0.832903,1.438510,504,1 0 1 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.159.132.244" dst_port="443"/>
            <filter src_ip="133.159.83.27" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840418"/>
        <to usec="0" sec="1478840961"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="114.39.91.73"/>
        </slice>
        <from usec="0" sec="1478840865"/>
        <to usec="0" sec="1478840867"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.139.39.204"/>
        </slice>
        <from usec="0" sec="1478840785"/>
        <to usec="0" sec="1478840787"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="17.183.192.138" dst_port="443"/>
            <filter dst_ip="17.227.54.200" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840462"/>
        <to usec="0" sec="1478841298"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.177.64.43"/>
        </slice>
        <from usec="0" sec="1478840961"/>
        <to usec="0" sec="1478840963"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="164.247.255.82"/>
        </slice>
        <from usec="0" sec="1478840456"/>
        <to usec="0" sec="1478840459"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="195.141.69.169"/>
        </slice>
        <from usec="0" sec="1478840568"/>
        <to usec="0" sec="1478840570"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="163.99.22.42" src_port="40181" dst_port="587"/>
        </slice>
        <from usec="0" sec="1478840402"/>
        <to usec="0" sec="1478840415"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.37.223.173"/>
        </slice>
        <from usec="0" sec="1478841129"/>
        <to usec="0" sec="1478841132"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.157.77.252" dst_ip="13.108.220.128" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840419"/>
        <to usec="0" sec="1478841295"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="173.25.250.95"/>
        </slice>
        <from usec="0" sec="1478840452"/>
        <to usec="0" sec="1478840455"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.81.172"/>
        </slice>
        <from usec="0" sec="1478840452"/>
        <to usec="0" sec="1478840454"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.139.248.210"/>
        </slice>
        <from usec="0" sec="1478840672"/>
        <to usec="0" sec="1478840674"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.37.153.194"/>
        </slice>
        <from usec="0" sec="1478840945"/>
        <to usec="0" sec="1478840947"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="124.121.228.73"/>
        </slice>
        <from usec="0" sec="1478840696"/>
        <to usec="0" sec="1478840698"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="42.73.123.217"/>
        </slice>
        <from usec="0" sec="1478840928"/>
        <to usec="0" sec="1478840930"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="5.189.73.183"/>
        </slice>
        <from usec="0" sec="1478840645"/>
        <to usec="0" sec="1478840648"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="118.8.172.197"/>
        </slice>
        <from usec="0" sec="1478840491"/>
        <to usec="0" sec="1478840493"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_port="443"/>
            <filter dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840402"/>
        <to usec="0" sec="1478841299"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.180.6.79"/>
        </slice>
        <from usec="0" sec="1478841132"/>
        <to usec="0" sec="1478841134"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.124.73"/>
        </slice>
        <from usec="0" sec="1478840825"/>
        <to usec="0" sec="1478840827"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="207.29.172.61"/>
        </slice>
        <from usec="0" sec="1478840463"/>
        <to usec="0" sec="1478840465"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.11.221.178"/>
        </slice>
        <from usec="0" sec="1478840693"/>
        <to usec="0" sec="1478840696"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.79.173" dst_ip="150.199.135.119" dst_port="443"/>
            <filter src_ip="163.37.79.173" dst_ip="150.199.135.118" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840423"/>
        <to usec="0" sec="1478841282"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.44.198.60"/>
        </slice>
        <from usec="0" sec="1478840405"/>
        <to usec="0" sec="1478840408"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.159.74.36"/>
        </slice>
        <from usec="0" sec="1478841172"/>
        <to usec="0" sec="1478841218"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="177.0.191.179"/>
        </slice>
        <from usec="0" sec="1478840707"/>
        <to usec="0" sec="1478840709"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.9.221.171"/>
        </slice>
        <from usec="0" sec="1478840801"/>
        <to usec="0" sec="1478840803"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="111.183.40.63"/>
        </slice>
        <from usec="0" sec="1478841263"/>
        <to usec="0" sec="1478841265"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.149.191"/>
        </slice>
        <from usec="0" sec="1478841149"/>
        <to usec="0" sec="1478841152"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.134.112.126" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840533"/>
        <to usec="0" sec="1478841299"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.149.190"/>
        </slice>
        <from usec="0" sec="1478840445"/>
        <to usec="0" sec="1478840447"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="211.117.162.4"/>
        </slice>
        <from usec="0" sec="1478840449"/>
        <to usec="0" sec="1478840451"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="221.40.120.71"/>
        </slice>
        <from usec="0" sec="1478841004"/>
        <to usec="0" sec="1478841006"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="151.122.223.122"/>
        </slice>
        <from usec="0" sec="1478840983"/>
        <to usec="0" sec="1478840985"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.44.202.58"/>
        </slice>
        <from usec="0" sec="1478841275"/>
        <to usec="0" sec="1478841277"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="94.50.175.134"/>
        </slice>
        <from usec="0" sec="1478841173"/>
        <to usec="0" sec="1478841176"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACKt">
        <slice>
            <filter src_ip="163.37.222.4"/>
        </slice>
        <from usec="0" sec="1478840843"/>
        <to usec="0" sec="1478840845"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.149.186"/>
        </slice>
        <from usec="0" sec="1478840405"/>
        <to usec="0" sec="1478840408"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="112.241.187.247"/>
        </slice>
        <from usec="0" sec="1478840656"/>
        <to usec="0" sec="1478840658"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.37.234.13"/>
        </slice>
        <from usec="0" sec="1478840963"/>
        <to usec="0" sec="1478840966"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.139.63.15"/>
        </slice>
        <from usec="0" sec="1478840680"/>
        <to usec="0" sec="1478840682"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.139.74.190" dst_ip="141.245.123.10" dst_port="443"/>
            <filter src_ip="133.139.74.190" dst_ip="141.245.123.31" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840815"/>
        <to usec="0" sec="1478840820"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="221.49.238.110"/>
        </slice>
        <from usec="0" sec="1478840444"/>
        <to usec="0" sec="1478841177"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="131.113.68.110"/>
        </slice>
        <from usec="0" sec="1478840739"/>
        <to usec="0" sec="1478840741"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="83.35.146.34"/>
        </slice>
        <from usec="0" sec="1478840652"/>
        <to usec="0" sec="1478840654"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.134.98"/>
        </slice>
        <from usec="0" sec="1478840860"/>
        <to usec="0" sec="1478840862"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.170.83"/>
        </slice>
        <from usec="0" sec="1478840898"/>
        <to usec="0" sec="1478840900"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.3.24"/>
        </slice>
        <from usec="0" sec="1478841113"/>
        <to usec="0" sec="1478841116"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="182.137.232.160"/>
        </slice>
        <from usec="0" sec="1478840422"/>
        <to usec="0" sec="1478840424"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.37.179.105"/>
        </slice>
        <from usec="0" sec="1478840635"/>
        <to usec="0" sec="1478840637"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.44.147.149"/>
        </slice>
        <from usec="0" sec="1478840430"/>
        <to usec="0" sec="1478840432"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.229.210"/>
        </slice>
        <from usec="0" sec="1478840580"/>
        <to usec="0" sec="1478840583"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.129.210"/>
        </slice>
        <from usec="0" sec="1478840596"/>
        <to usec="0" sec="1478840712"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="188.169.125.83"/>
        </slice>
        <from usec="0" sec="1478840449"/>
        <to usec="0" sec="1478840451"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="115.168.159.31"/>
        </slice>
        <from usec="0" sec="1478840621"/>
        <to usec="0" sec="1478841271"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="1.92.90.64"/>
        </slice>
        <from usec="0" sec="1478841156"/>
        <to usec="0" sec="1478841158"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.44.198.91" dst_ip="17.227.54.246" dst_port="443"/>
            <filter src_ip="157.44.198.91" dst_ip="17.227.54.178" dst_port="443"/>
            <filter src_ip="157.44.198.91" dst_ip="17.227.54.136" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840402"/>
        <to usec="0" sec="1478840489"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="138.106.0.62"/>
        </slice>
        <from usec="0" sec="1478840852"/>
        <to usec="0" sec="1478840855"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="61.143.118.68"/>
        </slice>
        <from usec="0" sec="1478840926"/>
        <to usec="0" sec="1478840951"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.197.123"/>
        </slice>
        <from usec="0" sec="1478840966"/>
        <to usec="0" sec="1478840968"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.139.136.36"/>
        </slice>
        <from usec="0" sec="1478840407"/>
        <to usec="0" sec="1478840410"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="118.248.228.90"/>
        </slice>
        <from usec="0" sec="1478841294"/>
        <to usec="0" sec="1478841296"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.177.71.133"/>
        </slice>
        <from usec="0" sec="1478840513"/>
        <to usec="0" sec="1478841150"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="65.84.60.9" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840441"/>
        <to usec="0" sec="1478841279"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.73.232"/>
        </slice>
        <from usec="0" sec="1478840837"/>
        <to usec="0" sec="1478841089"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="175.117.150.119"/>
        </slice>
        <from usec="0" sec="1478840835"/>
        <to usec="0" sec="1478840837"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="64.89.183.209"/>
        </slice>
        <from usec="0" sec="1478840595"/>
        <to usec="0" sec="1478840623"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.37.161.180"/>
        </slice>
        <from usec="0" sec="1478841292"/>
        <to usec="0" sec="1478841294"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="14.28.143.148"/>
        </slice>
        <from usec="0" sec="1478841188"/>
        <to usec="0" sec="1478841190"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="31.226.113.175"/>
        </slice>
        <from usec="0" sec="1478840872"/>
        <to usec="0" sec="1478840874"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.44.98.86" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840433"/>
        <to usec="0" sec="1478841237"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="60.11.166.79"/>
        </slice>
        <from usec="0" sec="1478840588"/>
        <to usec="0" sec="1478841189"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="126.11.50.62"/>
        </slice>
        <from usec="0" sec="1478841269"/>
        <to usec="0" sec="1478841271"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="117.217.15.77"/>
        </slice>
        <from usec="0" sec="1478840772"/>
        <to usec="0" sec="1478841022"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.86.109"/>
        </slice>
        <from usec="0" sec="1478840654"/>
        <to usec="0" sec="1478840656"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="177.180.233.157"/>
        </slice>
        <from usec="0" sec="1478840737"/>
        <to usec="0" sec="1478840739"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="222.21.60.107"/>
        </slice>
        <from usec="0" sec="1478841179"/>
        <to usec="0" sec="1478841181"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.1.153"/>
        </slice>
        <from usec="0" sec="1478840558"/>
        <to usec="0" sec="1478840560"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.80.118"/>
        </slice>
        <from usec="0" sec="1478840920"/>
        <to usec="0" sec="1478840922"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.139.249.224"/>
        </slice>
        <from usec="0" sec="1478840422"/>
        <to usec="0" sec="1478840424"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.69.225"/>
        </slice>
        <from usec="0" sec="1478840772"/>
        <to usec="0" sec="1478840774"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.37.126.113"/>
        </slice>
        <from usec="0" sec="1478841010"/>
        <to usec="0" sec="1478841013"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.159.81.236"/>
        </slice>
        <from usec="0" sec="1478840770"/>
        <to usec="0" sec="1478840772"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.124.99"/>
        </slice>
        <from usec="0" sec="1478840763"/>
        <to usec="0" sec="1478840765"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="114.31.4.24"/>
        </slice>
        <from usec="0" sec="1478840543"/>
        <to usec="0" sec="1478840546"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.159.64.17"/>
        </slice>
        <from usec="0" sec="1478840742"/>
        <to usec="0" sec="1478840744"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.149.145"/>
        </slice>
        <from usec="0" sec="1478840764"/>
        <to usec="0" sec="1478840946"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.132.33"/>
        </slice>
        <from usec="0" sec="1478840936"/>
        <to usec="0" sec="1478840938"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.125.178"/>
        </slice>
        <from usec="0" sec="1478841291"/>
        <to usec="0" sec="1478841293"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.37.124.129"/>
        </slice>
        <from usec="0" sec="1478840787"/>
        <to usec="0" sec="1478840940"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.126.129"/>
        </slice>
        <from usec="0" sec="1478841193"/>
        <to usec="0" sec="1478841195"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.197.131"/>
        </slice>
        <from usec="0" sec="1478840741"/>
        <to usec="0" sec="1478841050"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="123.255.115.135"/>
        </slice>
        <from usec="0" sec="1478840948"/>
        <to usec="0" sec="1478840950"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="124.6.145.122"/>
        </slice>
        <from usec="0" sec="1478840633"/>
        <to usec="0" sec="1478840635"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.159.87.112"/>
        </slice>
        <from usec="0" sec="1478841012"/>
        <to usec="0" sec="1478841014"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.44.19.119"/>
        </slice>
        <from usec="0" sec="1478841167"/>
        <to usec="0" sec="1478841169"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="223.14.84.137"/>
        </slice>
        <from usec="0" sec="1478841296"/>
        <to usec="0" sec="1478841298"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.44.147.114"/>
        </slice>
        <from usec="0" sec="1478840407"/>
        <to usec="0" sec="1478840410"/>
    </anomaly>
    <anomaly type="notice" value="0.788914,1.411590,999,1 1 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="157.44.65.160" dst_port="443"/>
            <filter dst_ip="17.133.152.113" dst_port="993"/>
        </slice>
        <from usec="0" sec="1478840405"/>
        <to usec="0" sec="1478841300"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="119.112.226.137"/>
        </slice>
        <from usec="0" sec="1478840781"/>
        <to usec="0" sec="1478840784"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.142.137"/>
        </slice>
        <from usec="0" sec="1478840823"/>
        <to usec="0" sec="1478840826"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.177.71.119"/>
        </slice>
        <from usec="0" sec="1478840713"/>
        <to usec="0" sec="1478840716"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="71.90.32.140"/>
        </slice>
        <from usec="0" sec="1478840931"/>
        <to usec="0" sec="1478840934"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="152.0.219.96"/>
        </slice>
        <from usec="0" sec="1478840780"/>
        <to usec="0" sec="1478840782"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="1.92.244.145"/>
        </slice>
        <from usec="0" sec="1478840520"/>
        <to usec="0" sec="1478840523"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.159.81.99"/>
        </slice>
        <from usec="0" sec="1478840471"/>
        <to usec="0" sec="1478840473"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="106.36.72.98"/>
        </slice>
        <from usec="0" sec="1478840617"/>
        <to usec="0" sec="1478840619"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="171.28.180.98"/>
        </slice>
        <from usec="0" sec="1478840508"/>
        <to usec="0" sec="1478840510"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.159.66.100"/>
        </slice>
        <from usec="0" sec="1478840455"/>
        <to usec="0" sec="1478840457"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,004,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="220.141.109.147"/>
        </slice>
        <from usec="0" sec="1478840443"/>
        <to usec="0" sec="1478840446"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.44.96"/>
        </slice>
        <from usec="0" sec="1478840441"/>
        <to usec="0" sec="1478840443"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="73.112.249.96"/>
        </slice>
        <from usec="0" sec="1478841099"/>
        <to usec="0" sec="1478841101"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.79.156"/>
        </slice>
        <from usec="0" sec="1478840929"/>
        <to usec="0" sec="1478840931"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.139.45.107"/>
        </slice>
        <from usec="0" sec="1478841269"/>
        <to usec="0" sec="1478841271"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.44.223.95"/>
        </slice>
        <from usec="0" sec="1478840412"/>
        <to usec="0" sec="1478840415"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.44.191"/>
        </slice>
        <from usec="0" sec="1478841229"/>
        <to usec="0" sec="1478841231"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.53.91"/>
        </slice>
        <from usec="0" sec="1478840653"/>
        <to usec="0" sec="1478840655"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.37.208.68"/>
        </slice>
        <from usec="0" sec="1478840464"/>
        <to usec="0" sec="1478840467"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="27.247.101.88"/>
        </slice>
        <from usec="0" sec="1478840730"/>
        <to usec="0" sec="1478840732"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="118.162.168.80"/>
        </slice>
        <from usec="0" sec="1478840418"/>
        <to usec="0" sec="1478841255"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="212.36.112.80"/>
        </slice>
        <from usec="0" sec="1478840575"/>
        <to usec="0" sec="1478840577"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="108.253.137.78"/>
        </slice>
        <from usec="0" sec="1478840464"/>
        <to usec="0" sec="1478840467"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.149.72"/>
        </slice>
        <from usec="0" sec="1478840688"/>
        <to usec="0" sec="1478840691"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.159.42.73"/>
        </slice>
        <from usec="0" sec="1478840837"/>
        <to usec="0" sec="1478840839"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.126.177"/>
        </slice>
        <from usec="0" sec="1478840423"/>
        <to usec="0" sec="1478840425"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="117.210.88.65"/>
        </slice>
        <from usec="0" sec="1478841231"/>
        <to usec="0" sec="1478841234"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="89.96.39.189"/>
        </slice>
        <from usec="0" sec="1478840485"/>
        <to usec="0" sec="1478840488"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="223.11.151.85"/>
        </slice>
        <from usec="0" sec="1478840405"/>
        <to usec="0" sec="1478840407"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="211.41.220.170"/>
        </slice>
        <from usec="0" sec="1478840709"/>
        <to usec="0" sec="1478840711"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.148.87"/>
        </slice>
        <from usec="0" sec="1478840890"/>
        <to usec="0" sec="1478840893"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="125.143.71.168"/>
        </slice>
        <from usec="0" sec="1478840410"/>
        <to usec="0" sec="1478840412"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACKt">
        <slice>
            <filter src_ip="133.159.45.69"/>
        </slice>
        <from usec="0" sec="1478840987"/>
        <to usec="0" sec="1478840989"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="119.117.118.164"/>
        </slice>
        <from usec="0" sec="1478840633"/>
        <to usec="0" sec="1478840635"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="175.198.233.92"/>
        </slice>
        <from usec="0" sec="1478840816"/>
        <to usec="0" sec="1478840818"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.139.159.75"/>
        </slice>
        <from usec="0" sec="1478840402"/>
        <to usec="0" sec="1478840404"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.135.69"/>
        </slice>
        <from usec="0" sec="1478840970"/>
        <to usec="0" sec="1478840973"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.177.79.169"/>
        </slice>
        <from usec="0" sec="1478840678"/>
        <to usec="0" sec="1478840680"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="124.101.72.0"/>
        </slice>
        <from usec="0" sec="1478840976"/>
        <to usec="0" sec="1478840978"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.9.220.192"/>
        </slice>
        <from usec="0" sec="1478840509"/>
        <to usec="0" sec="1478841036"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="125.98.223.1"/>
        </slice>
        <from usec="0" sec="1478841073"/>
        <to usec="0" sec="1478841076"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="74.15.48.253"/>
        </slice>
        <from usec="0" sec="1478840459"/>
        <to usec="0" sec="1478840461"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="110.49.28.122" dst_ip="202.11.217.191" src_port="54108" dst_port="995"/>
            <filter src_ip="110.49.28.122" dst_ip="202.11.217.191" src_port="53321" dst_port="993"/>
            <filter src_ip="110.49.28.122" dst_ip="202.11.217.191" src_port="45167" dst_port="993"/>
        </slice>
        <from usec="0" sec="1478840808"/>
        <to usec="0" sec="1478840810"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.37.223.3"/>
        </slice>
        <from usec="0" sec="1478841298"/>
        <to usec="0" sec="1478841300"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="220.136.78.253"/>
        </slice>
        <from usec="0" sec="1478840759"/>
        <to usec="0" sec="1478840761"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.84.196"/>
        </slice>
        <from usec="0" sec="1478840522"/>
        <to usec="0" sec="1478840524"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="125.121.179.59"/>
        </slice>
        <from usec="0" sec="1478840784"/>
        <to usec="0" sec="1478840786"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="31.97.240.5"/>
        </slice>
        <from usec="0" sec="1478841085"/>
        <to usec="0" sec="1478841088"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="212.36.112.54"/>
        </slice>
        <from usec="0" sec="1478840863"/>
        <to usec="0" sec="1478840866"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.159.44.52"/>
        </slice>
        <from usec="0" sec="1478841096"/>
        <to usec="0" sec="1478841098"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.222.204"/>
        </slice>
        <from usec="0" sec="1478840889"/>
        <to usec="0" sec="1478840891"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="133.159.25.54"/>
        </slice>
        <from usec="0" sec="1478840983"/>
        <to usec="0" sec="1478840985"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.77.10"/>
        </slice>
        <from usec="0" sec="1478840974"/>
        <to usec="0" sec="1478840977"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.159.77.9"/>
        </slice>
        <from usec="0" sec="1478840769"/>
        <to usec="0" sec="1478840771"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="14.132.204.241"/>
        </slice>
        <from usec="0" sec="1478840624"/>
        <to usec="0" sec="1478840626"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="14.138.184.246"/>
        </slice>
        <from usec="0" sec="1478840531"/>
        <to usec="0" sec="1478840979"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="113.16.62.239"/>
        </slice>
        <from usec="0" sec="1478841113"/>
        <to usec="0" sec="1478841116"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.139.217.33"/>
        </slice>
        <from usec="0" sec="1478840963"/>
        <to usec="0" sec="1478840966"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="163.37.254.30" dst_ip="173.24.241.104" src_port="41976" dst_port="80"/>
            <filter src_ip="163.37.254.30" dst_ip="173.24.241.104" src_port="41974" dst_port="80"/>
            <filter src_ip="163.37.155.193" dst_ip="173.24.241.104" src_port="53633" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840875"/>
        <to usec="0" sec="1478840955"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="133.139.200.238" dst_ip="17.227.54.233" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840839"/>
        <to usec="0" sec="1478840857"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.44.40.220"/>
        </slice>
        <from usec="0" sec="1478841171"/>
        <to usec="0" sec="1478841173"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.148.29"/>
        </slice>
        <from usec="0" sec="1478840900"/>
        <to usec="0" sec="1478840962"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="218.246.43.19"/>
        </slice>
        <from usec="0" sec="1478841209"/>
        <to usec="0" sec="1478841211"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="218.29.133.35"/>
        </slice>
        <from usec="0" sec="1478840753"/>
        <to usec="0" sec="1478840755"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.78.230"/>
        </slice>
        <from usec="0" sec="1478840479"/>
        <to usec="0" sec="1478840482"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="58.203.90.25"/>
        </slice>
        <from usec="0" sec="1478840669"/>
        <to usec="0" sec="1478840672"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="118.28.1.38"/>
        </slice>
        <from usec="0" sec="1478841045"/>
        <to usec="0" sec="1478841048"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.74.137.40"/>
        </slice>
        <from usec="0" sec="1478840414"/>
        <to usec="0" sec="1478840417"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="36.24.38.221"/>
        </slice>
        <from usec="0" sec="1478840403"/>
        <to usec="0" sec="1478840405"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="125.83.224.34"/>
        </slice>
        <from usec="0" sec="1478840800"/>
        <to usec="0" sec="1478840802"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="181.78.29.28"/>
        </slice>
        <from usec="0" sec="1478840674"/>
        <to usec="0" sec="1478840694"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="68.148.229.215"/>
        </slice>
        <from usec="0" sec="1478840582"/>
        <to usec="0" sec="1478840584"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="14.110.247.211"/>
        </slice>
        <from usec="0" sec="1478840416"/>
        <to usec="0" sec="1478840418"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.132.90.228"/>
        </slice>
        <from usec="0" sec="1478840644"/>
        <to usec="0" sec="1478840646"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.44.44.216"/>
        </slice>
        <from usec="0" sec="1478840443"/>
        <to usec="0" sec="1478840446"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="14.154.123.235"/>
        </slice>
        <from usec="0" sec="1478840677"/>
        <to usec="0" sec="1478840680"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="121.102.48.224"/>
        </slice>
        <from usec="0" sec="1478840447"/>
        <to usec="0" sec="1478840450"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="121.101.129.34"/>
        </slice>
        <from usec="0" sec="1478840813"/>
        <to usec="0" sec="1478840816"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="180.140.215.251"/>
        </slice>
        <from usec="0" sec="1478841209"/>
        <to usec="0" sec="1478841211"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.26.57"/>
        </slice>
        <from usec="0" sec="1478840768"/>
        <to usec="0" sec="1478840773"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="113.156.47.39"/>
        </slice>
        <from usec="0" sec="1478841092"/>
        <to usec="0" sec="1478841094"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="216.20.94.218"/>
        </slice>
        <from usec="0" sec="1478840473"/>
        <to usec="0" sec="1478840476"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="125.109.190.248"/>
        </slice>
        <from usec="0" sec="1478841290"/>
        <to usec="0" sec="1478841292"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="112.17.255.200"/>
        </slice>
        <from usec="0" sec="1478840872"/>
        <to usec="0" sec="1478840874"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.37.196.48" dst_ip="202.3.244.204" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840775"/>
        <to usec="0" sec="1478840995"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.139.159.70" dst_ip="17.183.192.7" dst_port="443"/>
            <filter src_ip="133.139.159.70" dst_ip="17.134.112.126" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840649"/>
        <to usec="0" sec="1478841101"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="121.59.90.22"/>
        </slice>
        <from usec="0" sec="1478840923"/>
        <to usec="0" sec="1478841295"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.223.41"/>
        </slice>
        <from usec="0" sec="1478840511"/>
        <to usec="0" sec="1478840513"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="175.123.48.211"/>
        </slice>
        <from usec="0" sec="1478841064"/>
        <to usec="0" sec="1478841066"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.44.19.30"/>
        </slice>
        <from usec="0" sec="1478840410"/>
        <to usec="0" sec="1478840413"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.159.67.18"/>
        </slice>
        <from usec="0" sec="1478841222"/>
        <to usec="0" sec="1478841224"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="203.177.73.12" dst_port="80"/>
            <filter src_ip="203.177.73.12" dst_ip="72.213.169.106" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478841008"/>
        <to usec="0" sec="1478841122"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.44.202.231"/>
        </slice>
        <from usec="0" sec="1478840626"/>
        <to usec="0" sec="1478840628"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="115.47.250.212"/>
        </slice>
        <from usec="0" sec="1478840671"/>
        <to usec="0" sec="1478840717"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.37.152.215"/>
        </slice>
        <from usec="0" sec="1478840415"/>
        <to usec="0" sec="1478840948"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="49.184.201.6"/>
        </slice>
        <from usec="0" sec="1478840985"/>
        <to usec="0" sec="1478840988"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="123.254.139.198"/>
        </slice>
        <from usec="0" sec="1478840768"/>
        <to usec="0" sec="1478840770"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="93.187.128.228"/>
        </slice>
        <from usec="0" sec="1478840940"/>
        <to usec="0" sec="1478840942"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="47.128.93.216"/>
        </slice>
        <from usec="0" sec="1478840658"/>
        <to usec="0" sec="1478840661"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.44.19.23"/>
        </slice>
        <from usec="0" sec="1478840817"/>
        <to usec="0" sec="1478840820"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="182.176.181.22"/>
        </slice>
        <from usec="0" sec="1478840598"/>
        <to usec="0" sec="1478840600"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="183.110.179.26"/>
        </slice>
        <from usec="0" sec="1478841146"/>
        <to usec="0" sec="1478841148"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="50.17.175.210"/>
        </slice>
        <from usec="0" sec="1478840585"/>
        <to usec="0" sec="1478840587"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="59.32.142.23"/>
        </slice>
        <from usec="0" sec="1478840548"/>
        <to usec="0" sec="1478841193"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="17.187.33.241"/>
        </slice>
        <from usec="0" sec="1478840428"/>
        <to usec="0" sec="1478840430"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="91.11.231.154"/>
        </slice>
        <from usec="0" sec="1478840849"/>
        <to usec="0" sec="1478840851"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="91.11.231.148" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840503"/>
        <to usec="0" sec="1478841110"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="17.133.136.55"/>
        </slice>
        <from usec="0" sec="1478840455"/>
        <to usec="0" sec="1478840457"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="192.47.236.217"/>
        </slice>
        <from usec="0" sec="1478841022"/>
        <to usec="0" sec="1478841024"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.37.132.36" dst_ip="104.40.224.52" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478841188"/>
        <to usec="0" sec="1478841260"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,502,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="212.130.203.251"/>
        </slice>
        <from usec="0" sec="1478840673"/>
        <to usec="0" sec="1478840675"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="17.224.137.158"/>
        </slice>
        <from usec="0" sec="1478841284"/>
        <to usec="0" sec="1478841285"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.186.162.55"/>
        </slice>
        <from usec="0" sec="1478840710"/>
        <to usec="0" sec="1478840712"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.159.124.66" dst_ip="72.213.168.142"/>
            <filter dst_ip="72.213.168.142" dst_port="443"/>
            <filter src_ip="133.159.124.66" dst_ip="54.241.13.84" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840478"/>
        <to usec="0" sec="1478840960"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.37.223.240" dst_port="80"/>
            <filter src_ip="163.37.223.240" dst_port="443"/>
            <filter src_ip="163.37.125.23" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840438"/>
        <to usec="0" sec="1478841270"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.177.75.231"/>
        </slice>
        <from usec="0" sec="1478840802"/>
        <to usec="0" sec="1478840804"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="133.78.24.170"/>
        </slice>
        <from usec="0" sec="1478841290"/>
        <to usec="0" sec="1478841292"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="23.40.65.124"/>
        </slice>
        <from usec="0" sec="1478840660"/>
        <to usec="0" sec="1478840662"/>
    </anomaly>
    <anomaly type="notice" value="0.655331,1.403870,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="202.2.236.107" dst_port="53"/>
            <filter src_ip="202.2.236.107" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840401"/>
        <to usec="0" sec="1478841174"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="163.37.238.143"/>
        </slice>
        <from usec="0" sec="1478840973"/>
        <to usec="0" sec="1478840975"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="123.255.115.135" dst_ip="203.177.71.99" src_port="57571" dst_port="80"/>
            <filter src_ip="220.170.148.9" dst_ip="203.177.71.99" src_port="52133" dst_port="80"/>
            <filter src_ip="195.158.122.93" dst_ip="203.177.71.99" src_port="45726" dst_port="53"/>
        </slice>
        <from usec="0" sec="1478840916"/>
        <to usec="0" sec="1478840919"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.37.132.68" dst_ip="31.194.172.7" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840764"/>
        <to usec="0" sec="1478840766"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.37.116.215" dst_port="443"/>
            <filter dst_ip="17.228.19.103" dst_port="5223"/>
            <filter src_ip="163.37.116.215" dst_ip="178.7.95.129" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840452"/>
        <to usec="0" sec="1478840946"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.66.166" dst_ip="17.227.54.246" dst_port="443"/>
            <filter src_ip="133.159.66.166" dst_ip="17.227.54.156" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840632"/>
        <to usec="0" sec="1478840853"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.37.186.168" dst_port="443"/>
            <filter src_ip="163.37.186.168" dst_port="80"/>
            <filter dst_ip="52.72.81.66" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840791"/>
        <to usec="0" sec="1478841257"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.198.148.163"/>
        </slice>
        <from usec="0" sec="1478840878"/>
        <to usec="0" sec="1478840880"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.187.204.246" dst_port="993"/>
        </slice>
        <from usec="0" sec="1478840499"/>
        <to usec="0" sec="1478841145"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.149.78" dst_ip="104.45.174.243" src_port="63949" dst_port="443"/>
            <filter src_ip="163.37.149.78" dst_ip="65.86.123.86" src_port="65299" dst_port="443"/>
            <filter src_ip="163.37.149.78" dst_ip="132.245.220.162" src_port="63856" dst_port="443"/>
            <filter src_ip="163.37.149.78" dst_ip="134.104.151.99" src_port="65436" dst_port="80"/>
            <filter src_ip="163.37.149.78" dst_ip="13.65.10.196" src_port="65492" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478841135"/>
        <to usec="0" sec="1478841137"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="69.15.70.170"/>
        </slice>
        <from usec="0" sec="1478840414"/>
        <to usec="0" sec="1478840417"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.177.74.197"/>
        </slice>
        <from usec="0" sec="1478840618"/>
        <to usec="0" sec="1478840909"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.177.78.244"/>
        </slice>
        <from usec="0" sec="1478840970"/>
        <to usec="0" sec="1478840973"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="17.186.161.221"/>
        </slice>
        <from usec="0" sec="1478840778"/>
        <to usec="0" sec="1478840780"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.44.198.150" dst_ip="17.134.113.21" dst_port="443"/>
            <filter src_ip="157.44.198.150" dst_ip="17.134.49.20" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840551"/>
        <to usec="0" sec="1478840553"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="163.37.174.206"/>
        </slice>
        <from usec="0" sec="1478840690"/>
        <to usec="0" sec="1478840692"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="54.254.77.52"/>
        </slice>
        <from usec="0" sec="1478840924"/>
        <to usec="0" sec="1478840926"/>
    </anomaly>
    <anomaly type="notice" value="0.832903,1.438510,999,1 0 1 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.74.176.119" dst_port="25"/>
            <filter src_ip="130.74.176.119" dst_ip="200.88.1.254" dst_port="53"/>
        </slice>
        <from usec="0" sec="1478840685"/>
        <to usec="0" sec="1478841284"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.159.171.122" dst_port="80"/>
            <filter src_ip="133.159.171.122" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840569"/>
        <to usec="0" sec="1478841156"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.139.201.44" dst_port="443"/>
            <filter src_ip="133.139.201.44" dst_ip="17.143.170.244" dst_port="993"/>
            <filter src_ip="133.139.201.44" dst_ip="17.187.204.246" dst_port="993"/>
        </slice>
        <from usec="0" sec="1478840965"/>
        <to usec="0" sec="1478841047"/>
    </anomaly>
    <anomaly type="notice" value="0.788914,1.411590,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.37.222.53" dst_ip="23.103.196.158" src_port="50330" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478841155"/>
        <to usec="0" sec="1478841157"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.37.234.200" dst_ip="192.25.125.118" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840810"/>
        <to usec="0" sec="1478841232"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.196.92" dst_ip="17.156.161.252" src_port="51460" dst_port="443"/>
            <filter src_ip="163.37.196.92" dst_ip="31.194.170.122" src_port="51108" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478841296"/>
        <to usec="0" sec="1478841298"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="163.37.196.35" dst_ip="31.194.174.50" dst_port="443"/>
            <filter src_ip="163.37.233.11" dst_ip="31.194.174.50" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478841092"/>
        <to usec="0" sec="1478841094"/>
    </anomaly>
    <anomaly type="notice" value="0.788914,1.411590,504,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="157.44.113.41" dst_port="443"/>
            <filter src_ip="157.44.113.41" dst_port="5223"/>
        </slice>
        <from usec="0" sec="1478840428"/>
        <to usec="0" sec="1478841256"/>
    </anomaly>
    <anomaly type="notice" value="0.859005,1.443940,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.177.68.96" dst_ip="203.177.68.96" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840481"/>
        <to usec="0" sec="1478841300"/>
    </anomaly>
    <anomaly type="notice" value="0.859005,1.443940,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="13.108.218.76" dst_ip="13.108.218.76" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840443"/>
        <to usec="0" sec="1478841144"/>
    </anomaly>
    <anomaly type="notice" value="0.788914,1.411590,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.26.205.128" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1478841185"/>
        <to usec="0" sec="1478841186"/>
    </anomaly>
    <anomaly type="notice" value="0.788914,1.411590,502,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="116.103.122.40" dst_ip="133.78.62.125" dst_port="22"/>
            <filter src_ip="116.103.122.40" dst_ip="133.78.53.129" dst_port="22"/>
            <filter src_ip="116.103.122.40" dst_ip="133.78.51.126" dst_port="22"/>
            <filter src_ip="116.103.122.40" dst_ip="133.78.50.126" dst_port="22"/>
            <filter src_ip="116.103.122.40" dst_ip="133.78.48.254" dst_port="22"/>
        </slice>
        <from usec="0" sec="1478840895"/>
        <to usec="0" sec="1478841274"/>
    </anomaly>
    <anomaly type="notice" value="0.788914,1.411590,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.37.125.187" dst_port="80"/>
            <filter src_ip="163.37.125.187" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478841259"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,502,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.177.73.51" dst_port="23"/>
            <filter src_ip="213.40.221.120" dst_ip="203.177.73.51" dst_port="22"/>
            <filter dst_ip="203.177.73.51"/>
        </slice>
        <from usec="0" sec="1478840418"/>
        <to usec="0" sec="1478840531"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="163.37.137.118" dst_ip="54.238.136.236" src_port="55932" dst_port="443"/>
            <filter src_ip="163.37.137.118" dst_ip="54.238.136.236" src_port="55926" dst_port="443"/>
            <filter src_ip="163.37.132.33" dst_ip="54.238.136.236" src_port="55231" dst_port="443"/>
            <filter src_ip="163.37.133.63" dst_ip="54.238.136.236" src_port="49467" dst_port="443"/>
            <filter src_ip="163.37.148.149" dst_ip="54.238.136.236" src_port="54496" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840579"/>
        <to usec="0" sec="1478840581"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.159.74.173" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840493"/>
        <to usec="0" sec="1478841236"/>
    </anomaly>
    <anomaly type="notice" value="0.899572,1.470270,901,0 0 1 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.177.68.96" dst_ip="203.177.68.96" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840481"/>
        <to usec="0" sec="1478841300"/>
    </anomaly>
    <anomaly type="notice" value="0.899572,1.470270,901,0 0 1 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="13.108.218.76" dst_ip="13.108.218.76" proto="tcp"/>
        </slice>
        <from usec="0" sec="1478840443"/>
        <to usec="0" sec="1478841144"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840688"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840688"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.254.38"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840508"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="17.172.150.13"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840508"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="59.97.42.52"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840508"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="78.28.56.131"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840508"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="218.178.242.12"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840507"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="59.97.245.133"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840506"/>
    </anomaly>
    <anomaly type="notice" value="0.655331,1.403870,999,1 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="150.176.219.115" dst_ip="202.2.199.12" src_port="500" dst_port="500"/>
            <filter src_ip="150.176.219.115" dst_ip="202.2.199.12"/>
            <filter src_ip="114.238.53.164" dst_ip="202.2.199.12" src_port="21898" dst_port="23"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478841203"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="123.141.235.148"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840508"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="179.142.13.61"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840508"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="27.176.180.222"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840508"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="118.94.240.75" src_port="61915" dst_port="23"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840508"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="78.246.72.165"/>
        </slice>
        <from usec="0" sec="1478840402"/>
        <to usec="0" sec="1478840508"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="59.99.58.200"/>
        </slice>
        <from usec="0" sec="1478840404"/>
        <to usec="0" sec="1478840496"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="178.114.50.46"/>
        </slice>
        <from usec="0" sec="1478840404"/>
        <to usec="0" sec="1478840506"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.51.125.233"/>
        </slice>
        <from usec="0" sec="1478840405"/>
        <to usec="0" sec="1478840471"/>
    </anomaly>
    <anomaly type="notice" value="0.655331,1.403870,504,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.139.240.112" dst_ip="125.4.106.163"/>
            <filter src_ip="133.139.240.112" dst_port="80"/>
            <filter dst_ip="125.4.106.163" dst_port="443"/>
            <filter src_ip="133.139.240.112" dst_ip="151.122.210.140" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840405"/>
        <to usec="0" sec="1478840940"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="151.122.207.122"/>
        </slice>
        <from usec="0" sec="1478840407"/>
        <to usec="0" sec="1478840508"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="61.42.83.124"/>
        </slice>
        <from usec="0" sec="1478840431"/>
        <to usec="0" sec="1478840463"/>
    </anomaly>
    <anomaly type="notice" value="0.655331,1.403870,503,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="122.66.24.140" dst_ip="203.177.68.96" src_port="49177" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840436"/>
        <to usec="0" sec="1478840445"/>
    </anomaly>
    <anomaly type="notice" value="0.655331,1.403870,503,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="179.142.63.178" dst_ip="203.177.67.113" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840441"/>
        <to usec="0" sec="1478841060"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.44.161.247"/>
        </slice>
        <from usec="0" sec="1478840450"/>
        <to usec="0" sec="1478840506"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="17.183.171.227"/>
        </slice>
        <from usec="0" sec="1478840464"/>
        <to usec="0" sec="1478840481"/>
    </anomaly>
    <anomaly type="notice" value="0.655331,1.403870,503,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="175.5.8.115" dst_ip="203.177.68.96" src_port="49429" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840478"/>
        <to usec="0" sec="1478840489"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="220.136.65.154"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840596"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="12.109.142.29"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840598"/>
    </anomaly>
    <anomaly type="notice" value="0.655331,1.403870,999,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.136.38.163" dst_ip="163.37.79.163" src_port="53918" dst_port="993"/>
            <filter src_ip="49.136.38.163" dst_ip="163.37.79.163" src_port="53916" dst_port="993"/>
            <filter src_ip="49.136.38.163" dst_ip="163.37.79.163" src_port="53913" dst_port="993"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840458"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="122.138.38.3"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840597"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="114.239.2.232"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840867"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="95.90.67.217"/>
        </slice>
        <from usec="0" sec="1478840401"/>
        <to usec="0" sec="1478840590"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="189.156.89.64"/>
        </slice>
        <from usec="0" sec="1478840401"/>
        <to usec="0" sec="1478840594"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="134.30.62.7"/>
        </slice>
        <from usec="0" sec="1478840401"/>
        <to usec="0" sec="1478840598"/>
    </anomaly>
    <anomaly type="notice" value="0.655331,1.403870,999,1 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.159.27.127" src_port="25"/>
        </slice>
        <from usec="0" sec="1478840402"/>
        <to usec="0" sec="1478841196"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,504,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="118.8.190.251" dst_ip="203.177.72.204" dst_port="80"/>
            <filter src_ip="118.8.190.251" dst_ip="203.177.72.204" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840403"/>
        <to usec="0" sec="1478840598"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.43.55.134"/>
        </slice>
        <from usec="0" sec="1478840451"/>
        <to usec="0" sec="1478840584"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="193.204.195.13"/>
        </slice>
        <from usec="0" sec="1478840554"/>
        <to usec="0" sec="1478840596"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="159.56.106.71" dst_port="81"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840688"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="113.130.49.123"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840957"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="218.178.181.3"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840687"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="222.19.81.188" dst_port="23"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840688"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="31.44.196.120" src_port="2217" dst_port="23"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840687"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.98.73.103"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840688"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="114.237.109.130"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840868"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="1.92.158.180"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840867"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="59.96.21.30"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840688"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="1.92.211.13"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840688"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="114.238.142.140"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840686"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="63.70.188.199"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840687"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="60.251.196.136"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840688"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="195.92.49.213"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840686"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="46.12.94.141"/>
        </slice>
        <from usec="0" sec="1478840401"/>
        <to usec="0" sec="1478840685"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="184.69.197.141"/>
        </slice>
        <from usec="0" sec="1478840401"/>
        <to usec="0" sec="1478840687"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="83.99.43.234"/>
        </slice>
        <from usec="0" sec="1478840402"/>
        <to usec="0" sec="1478840688"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="112.58.27.166"/>
        </slice>
        <from usec="0" sec="1478840402"/>
        <to usec="0" sec="1478840868"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="180.176.59.179"/>
        </slice>
        <from usec="0" sec="1478840402"/>
        <to usec="0" sec="1478840681"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="14.142.196.168"/>
        </slice>
        <from usec="0" sec="1478840403"/>
        <to usec="0" sec="1478840679"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="85.113.15.123"/>
        </slice>
        <from usec="0" sec="1478840403"/>
        <to usec="0" sec="1478840688"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.132.95.224"/>
        </slice>
        <from usec="0" sec="1478840404"/>
        <to usec="0" sec="1478840684"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="220.139.224.30"/>
        </slice>
        <from usec="0" sec="1478840405"/>
        <to usec="0" sec="1478840515"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="107.168.255.246"/>
        </slice>
        <from usec="0" sec="1478840406"/>
        <to usec="0" sec="1478840682"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.37.125.59"/>
        </slice>
        <from usec="0" sec="1478840407"/>
        <to usec="0" sec="1478840678"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="95.73.34.35"/>
        </slice>
        <from usec="0" sec="1478840599"/>
        <to usec="0" sec="1478840681"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.0.85.75"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840867"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="222.177.191.77"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840776"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="61.33.119.194"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840778"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="122.139.125.170"/>
        </slice>
        <from usec="0" sec="1478840401"/>
        <to usec="0" sec="1478840778"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="45.232.32.164"/>
        </slice>
        <from usec="0" sec="1478840401"/>
        <to usec="0" sec="1478840777"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="113.91.91.136"/>
        </slice>
        <from usec="0" sec="1478840401"/>
        <to usec="0" sec="1478840777"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="83.108.132.104"/>
        </slice>
        <from usec="0" sec="1478840401"/>
        <to usec="0" sec="1478840778"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="88.23.57.253"/>
        </slice>
        <from usec="0" sec="1478840402"/>
        <to usec="0" sec="1478840776"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="198.171.176.216" dst_ip="203.177.73.104" src_port="443"/>
        </slice>
        <from usec="0" sec="1478840557"/>
        <to usec="0" sec="1478840738"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="110.76.126.33"/>
        </slice>
        <from usec="0" sec="1478840404"/>
        <to usec="0" sec="1478841044"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="46.23.239.76"/>
        </slice>
        <from usec="0" sec="1478840404"/>
        <to usec="0" sec="1478840775"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="196.208.42.22"/>
        </slice>
        <from usec="0" sec="1478840409"/>
        <to usec="0" sec="1478840778"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="170.212.176.115"/>
        </slice>
        <from usec="0" sec="1478840418"/>
        <to usec="0" sec="1478840778"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="79.149.0.59"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840868"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="118.105.3.195"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840868"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="194.221.23.60"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840754"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="113.142.46.141"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840867"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="37.110.196.47"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840867"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="81.47.201.82"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840868"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="59.96.39.178"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840859"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="61.183.106.21"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840867"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="190.109.33.219"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840867"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="176.227.248.95"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840854"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="114.237.186.235"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840867"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="182.73.45.19"/>
        </slice>
        <from usec="0" sec="1478840401"/>
        <to usec="0" sec="1478840868"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="46.23.15.224"/>
        </slice>
        <from usec="0" sec="1478840401"/>
        <to usec="0" sec="1478840868"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.159.171.30"/>
        </slice>
        <from usec="0" sec="1478840401"/>
        <to usec="0" sec="1478840866"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="185.156.35.39"/>
        </slice>
        <from usec="0" sec="1478840401"/>
        <to usec="0" sec="1478840865"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="180.93.113.69"/>
        </slice>
        <from usec="0" sec="1478840401"/>
        <to usec="0" sec="1478840868"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="54.197.134.240"/>
        </slice>
        <from usec="0" sec="1478840402"/>
        <to usec="0" sec="1478840957"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="113.104.162.81"/>
        </slice>
        <from usec="0" sec="1478840402"/>
        <to usec="0" sec="1478840864"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="186.163.77.99"/>
        </slice>
        <from usec="0" sec="1478840402"/>
        <to usec="0" sec="1478840958"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="14.107.64.178"/>
        </slice>
        <from usec="0" sec="1478840402"/>
        <to usec="0" sec="1478840863"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="88.23.77.103"/>
        </slice>
        <from usec="0" sec="1478840402"/>
        <to usec="0" sec="1478840867"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="113.126.74.40"/>
        </slice>
        <from usec="0" sec="1478840403"/>
        <to usec="0" sec="1478840868"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="221.4.222.7"/>
        </slice>
        <from usec="0" sec="1478840403"/>
        <to usec="0" sec="1478840842"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="124.159.220.76"/>
        </slice>
        <from usec="0" sec="1478840403"/>
        <to usec="0" sec="1478840868"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="144.131.59.87"/>
        </slice>
        <from usec="0" sec="1478840405"/>
        <to usec="0" sec="1478840868"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="54.148.142.183"/>
        </slice>
        <from usec="0" sec="1478840405"/>
        <to usec="0" sec="1478840866"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="122.1.192.2"/>
        </slice>
        <from usec="0" sec="1478840406"/>
        <to usec="0" sec="1478840866"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="113.85.58.199"/>
        </slice>
        <from usec="0" sec="1478840407"/>
        <to usec="0" sec="1478840768"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,011,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="107.108.215.18"/>
        </slice>
        <from usec="0" sec="1478840413"/>
        <to usec="0" sec="1478840856"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="104.202.227.152"/>
        </slice>
        <from usec="0" sec="1478840468"/>
        <to usec="0" sec="1478840862"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="38.37.97.198"/>
        </slice>
        <from usec="0" sec="1478840606"/>
        <to usec="0" sec="1478840720"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="66.56.125.163"/>
        </slice>
        <from usec="0" sec="1478840848"/>
        <to usec="0" sec="1478840864"/>
    </anomaly>
    <anomaly type="notice" value="0.655331,1.403870,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="126.161.77.49" dst_ip="203.177.68.96" src_port="50898" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840862"/>
        <to usec="0" sec="1478840913"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="120.190.122.160"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840955"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="197.92.178.54"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840958"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="120.147.42.171"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840956"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="130.195.84.247"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840958"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="204.250.137.184"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840958"/>
    </anomaly>
    <anomaly type="notice" value="0.896091,1.426840,999,1 0 0 1 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.177.73.124" dst_port="53"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478841230"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="66.170.24.13"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840952"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="41.93.62.180"/>
        </slice>
        <from usec="0" sec="1478840401"/>
        <to usec="0" sec="1478840958"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="106.4.210.247"/>
        </slice>
        <from usec="0" sec="1478840401"/>
        <to usec="0" sec="1478840954"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="59.97.63.167"/>
        </slice>
        <from usec="0" sec="1478840402"/>
        <to usec="0" sec="1478840958"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="78.163.136.118"/>
        </slice>
        <from usec="0" sec="1478840402"/>
        <to usec="0" sec="1478840957"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="183.130.99.179"/>
        </slice>
        <from usec="0" sec="1478840402"/>
        <to usec="0" sec="1478840948"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="59.97.63.101"/>
        </slice>
        <from usec="0" sec="1478840402"/>
        <to usec="0" sec="1478840954"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.96.190.44"/>
        </slice>
        <from usec="0" sec="1478840402"/>
        <to usec="0" sec="1478840958"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="88.23.147.235"/>
        </slice>
        <from usec="0" sec="1478840402"/>
        <to usec="0" sec="1478840958"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.96.219.141"/>
        </slice>
        <from usec="0" sec="1478840403"/>
        <to usec="0" sec="1478840957"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="65.71.108.47"/>
        </slice>
        <from usec="0" sec="1478840405"/>
        <to usec="0" sec="1478840943"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="191.218.226.175"/>
        </slice>
        <from usec="0" sec="1478840405"/>
        <to usec="0" sec="1478840958"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="220.138.163.159"/>
        </slice>
        <from usec="0" sec="1478840410"/>
        <to usec="0" sec="1478840956"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="95.253.250.136"/>
        </slice>
        <from usec="0" sec="1478840411"/>
        <to usec="0" sec="1478840958"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="110.245.157.157"/>
        </slice>
        <from usec="0" sec="1478840418"/>
        <to usec="0" sec="1478840954"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="115.47.26.145"/>
        </slice>
        <from usec="0" sec="1478840430"/>
        <to usec="0" sec="1478840955"/>
    </anomaly>
    <anomaly type="notice" value="0.655331,1.403870,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.44.19.121" dst_port="80"/>
            <filter src_ip="157.44.19.121" dst_port="53"/>
        </slice>
        <from usec="0" sec="1478840648"/>
        <to usec="0" sec="1478840942"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="220.137.111.30"/>
        </slice>
        <from usec="0" sec="1478840402"/>
        <to usec="0" sec="1478841045"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="89.7.60.56"/>
        </slice>
        <from usec="0" sec="1478840403"/>
        <to usec="0" sec="1478841045"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="78.163.174.62"/>
        </slice>
        <from usec="0" sec="1478840451"/>
        <to usec="0" sec="1478841041"/>
    </anomaly>
    <anomaly type="notice" value="0.655331,1.403870,999,1 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="186.194.168.31" dst_ip="202.2.199.17" dst_port="23"/>
            <filter src_ip="78.90.169.51" dst_ip="202.2.199.17" dst_port="23"/>
        </slice>
        <from usec="0" sec="1478840971"/>
        <to usec="0" sec="1478841085"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.154.73" dst_port="443"/>
            <filter src_ip="163.37.154.73" dst_ip="52.125.193.97" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840409"/>
        <to usec="0" sec="1478841300"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="88.30.25.30"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478841119"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.37.152.159"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478841136"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="49.175.220.112"/>
        </slice>
        <from usec="0" sec="1478840401"/>
        <to usec="0" sec="1478841138"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,054,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="17.188.243.108" dst_ip="202.2.194.42" src_port="443"/>
            <filter src_ip="17.144.34.146" dst_ip="202.2.194.42" src_port="443"/>
        </slice>
        <from usec="0" sec="1478840402"/>
        <to usec="0" sec="1478841136"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="59.96.56.154"/>
        </slice>
        <from usec="0" sec="1478840406"/>
        <to usec="0" sec="1478841136"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="194.90.216.245"/>
        </slice>
        <from usec="0" sec="1478840969"/>
        <to usec="0" sec="1478840975"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="23.16.160.67"/>
        </slice>
        <from usec="0" sec="1478841116"/>
        <to usec="0" sec="1478841132"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.97.110.25"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478841224"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="114.236.42.126"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478841211"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="209.200.205.96"/>
        </slice>
        <from usec="0" sec="1478840401"/>
        <to usec="0" sec="1478841226"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="37.29.183.35"/>
        </slice>
        <from usec="0" sec="1478840401"/>
        <to usec="0" sec="1478841227"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="183.21.179.168"/>
        </slice>
        <from usec="0" sec="1478840406"/>
        <to usec="0" sec="1478841227"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.37.223.179" dst_ip="204.73.219.234" dst_port="443"/>
            <filter src_ip="163.37.223.179" dst_ip="74.218.123.213" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840558"/>
        <to usec="0" sec="1478840594"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="104.20.18.136" dst_ip="202.157.77.252" src_port="443"/>
        </slice>
        <from usec="0" sec="1478840402"/>
        <to usec="0" sec="1478840756"/>
    </anomaly>
    <anomaly type="notice" value="0.859005,1.443940,999,0 1 0 0 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.177.76.74" src_port="53"/>
            <filter dst_ip="203.177.76.74" dst_port="53"/>
        </slice>
        <from usec="0" sec="1478840523"/>
        <to usec="0" sec="1478841009"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,504,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.11.221.214" src_port="443"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840446"/>
    </anomaly>
    <anomaly type="notice" value="0.655331,1.403870,504,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="23.20.246.7" src_port="443"/>
            <filter src_ip="23.200.168.49" dst_ip="202.157.77.252"/>
            <filter src_ip="23.200.168.49" src_port="443"/>
            <filter src_ip="104.198.13.159" dst_ip="202.157.77.252" src_port="443"/>
        </slice>
        <from usec="0" sec="1478840406"/>
        <to usec="0" sec="1478840867"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.37.33.209" src_port="53"/>
        </slice>
        <from usec="0" sec="1478840535"/>
        <to usec="0" sec="1478840581"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="151.83.204.223" src_port="51693"/>
        </slice>
        <from usec="0" sec="1478840760"/>
        <to usec="0" sec="1478840806"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.177.71.253" src_port="53"/>
        </slice>
        <from usec="0" sec="1478840805"/>
        <to usec="0" sec="1478840851"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.37.33.237" src_port="53"/>
        </slice>
        <from usec="0" sec="1478840805"/>
        <to usec="0" sec="1478840851"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.177.73.124"/>
        </slice>
        <from usec="0" sec="1478840805"/>
        <to usec="0" sec="1478840851"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.180.179.89"/>
        </slice>
        <from usec="0" sec="1478840805"/>
        <to usec="0" sec="1478840851"/>
    </anomaly>
    <anomaly type="notice" value="0.699571,1.394270,999,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.177.64.199" dst_port="53"/>
        </slice>
        <from usec="0" sec="1478840715"/>
        <to usec="0" sec="1478841162"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.44.169.34" dst_ip="17.156.162.78" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840811"/>
        <to usec="0" sec="1478841281"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="199.140.26.40" src_port="80"/>
        </slice>
        <from usec="0" sec="1478840760"/>
        <to usec="0" sec="1478840851"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="198.19.14.31" dst_ip="202.157.77.252" src_port="443"/>
        </slice>
        <from usec="0" sec="1478841047"/>
        <to usec="0" sec="1478841241"/>
    </anomaly>
    <anomaly type="notice" value="0.699571,1.394270,503,1 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="52.204.243.81" dst_ip="203.177.68.96" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840482"/>
        <to usec="0" sec="1478841300"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="159.56.100.242" dst_port="81"/>
        </slice>
        <from usec="0" sec="1478840985"/>
        <to usec="0" sec="1478841031"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="133.159.31.254"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.699571,1.394270,999,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="204.4.132.125" src_port="40512" dst_port="123"/>
        </slice>
        <from usec="0" sec="1478840402"/>
        <to usec="0" sec="1478841284"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="91.4.176.248"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,020,0 0 0 0 0 0 1 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="202.2.199.6"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="120.75.79.141"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="163.99.66.141"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="89.252.170.31"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.699571,1.394270,999,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.159.27.229" src_port="53"/>
            <filter src_ip="133.159.27.229" dst_port="53"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.177.76.93"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.170.47.142"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="178.46.220.138"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="23.94.191.154"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="198.43.165.66"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="198.43.184.226"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.699571,1.394270,999,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.163.2.212" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="198.43.166.76"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="66.16.234.72"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.159.27.158"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.159.125.130" src_port="49015"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="71.201.88.130"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="93.158.44.135"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="5.254.165.122"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.19.3.122"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="66.16.193.117"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.958375,1.458850,020,0 0 0 1 0 0 1 0 0 0 0 0,hostout">
        <slice>
            <filter src_ip="203.177.69.142"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="66.16.212.157" src_port="58022"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="163.99.111.101"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="104.13.146.150"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="71.201.73.71"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="94.135.253.171"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="71.201.65.89" src_port="58022"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="71.201.65.90"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="71.201.100.55"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,020,0 0 0 0 0 0 1 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="202.2.219.21"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.159.25.139" dst_port="53"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,999,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.159.25.140" dst_ip="54.237.53.157" dst_port="53"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.18.31.238" dst_port="23"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="27.246.221.255" dst_port="445"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="114.239.165.233" dst_port="445"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="93.15.232.223" dst_port="445"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.159.44.124" dst_port="443"/>
            <filter src_ip="133.159.44.124" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840528"/>
        <to usec="0" sec="1478841300"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="180.189.134.130" dst_port="9200"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="175.151.12.140" dst_port="23"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,503,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="93.190.91.111" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="45.175.255.191" dst_port="445"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="108.253.137.78" dst_port="445"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="45.175.8.47" dst_port="445"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="31.96.162.236" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841121"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="202.2.249.129" dst_port="53"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,020,0 0 0 0 0 0 1 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="202.2.199.5"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="185.89.37.119"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="202.2.225.159"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="202.11.221.225"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="198.43.165.66"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="198.43.184.226"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.190.88.45"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="66.16.234.72"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,020,0 0 0 0 0 0 1 0 0 0 0 0,hostout">
        <slice>
            <filter src_ip="203.177.77.122"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.958375,1.458850,999,0 0 0 1 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.159.125.130" src_port="49015"/>
            <filter src_ip="133.159.125.130" src_port="49001"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="89.252.167.131"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.19.3.122"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.190.91.112"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="71.201.103.112"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="66.16.212.157"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="163.99.111.101"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="71.201.73.71"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="94.135.253.171"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="71.201.65.89"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="71.201.65.90"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="151.83.204.223"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,020,0 0 0 0 0 0 1 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="133.159.29.233"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,020,0 0 0 0 0 0 1 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="133.159.29.235"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="45.182.211.209" dst_port="110"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="107.108.73.21"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,020,0 0 0 0 0 0 1 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="202.2.237.20"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="202.2.237.161" src_port="53"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.159.216.3" src_port="53"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.699571,1.394270,010,1 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="124.238.253.15" dst_port="23"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.832903,1.438510,503,1 0 1 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.37.112.206" dst_port="80"/>
            <filter src_ip="163.37.112.206" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840696"/>
        <to usec="0" sec="1478840740"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.159.27.158" src_port="53"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.37.223.17" dst_ip="192.25.125.116" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478841156"/>
        <to usec="0" sec="1478841158"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="54.190.227.101" src_port="20118"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="31.96.162.236" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="9345" dst_port="23"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,dntscSYN">
        <slice>
            <filter src_port="9659" dst_port="23"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.10.89.47" src_port="21540" dst_port="23"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="23276" dst_port="23"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.74.132.231" dst_ip="17.183.195.226" dst_port="443"/>
            <filter src_ip="130.74.132.231" dst_ip="17.183.195.127" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840992"/>
        <to usec="0" sec="1478840995"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="121.210.233.168" dst_port="22"/>
        </slice>
        <from usec="0" sec="1478840421"/>
        <to usec="0" sec="1478840539"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.177.95.106" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840403"/>
        <to usec="0" sec="1478841135"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.25.125.112" dst_ip="163.37.125.23" src_port="443"/>
        </slice>
        <from usec="0" sec="1478840413"/>
        <to usec="0" sec="1478840598"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="108.254.24.97" src_port="80"/>
        </slice>
        <from usec="0" sec="1478841075"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="130.74.171.138" dst_ip="17.227.54.245" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478841200"/>
        <to usec="0" sec="1478841296"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.139.94.197" dst_ip="27.0.7.14" dst_port="80"/>
            <filter src_ip="133.139.94.197" dst_ip="17.133.146.91" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840738"/>
        <to usec="0" sec="1478841178"/>
    </anomaly>
    <anomaly type="notice" value="0.655331,1.403870,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.37.124.31" dst_ip="175.156.235.214" dst_port="80"/>
            <filter src_ip="163.37.124.31" dst_ip="173.194.155.201" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478841053"/>
        <to usec="0" sec="1478841275"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.139.169.163" dst_ip="17.134.113.45" dst_port="443"/>
            <filter src_ip="133.139.169.163" dst_ip="17.134.113.20" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840427"/>
        <to usec="0" sec="1478841231"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.37.104.227" dst_ip="140.225.162.63" dst_port="80"/>
        </slice>
        <from usec="0" sec="1478840863"/>
        <to usec="0" sec="1478840866"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,504,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="117.145.148.122" dst_ip="202.11.221.50" src_port="443"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.777756,1.427010,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="183.57.141.59" dst_ip="202.11.221.50" src_port="80"/>
        </slice>
        <from usec="0" sec="1478841255"/>
        <to usec="0" sec="1478841301"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,901,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.44.238.28" dst_ip="17.156.161.242" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840820"/>
        <to usec="0" sec="1478840822"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="192.46.88.206" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840715"/>
        <to usec="0" sec="1478841191"/>
    </anomaly>
    <anomaly type="notice" value="0.738216,1.436390,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.228.125.98" dst_port="5223"/>
            <filter dst_ip="17.228.125.98" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840400"/>
        <to usec="0" sec="1478840508"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.37.124.11" dst_port="80"/>
            <filter src_ip="163.37.129.138" dst_port="80"/>
            <filter src_ip="163.37.124.11" src_port="15894" dst_port="17788"/>
        </slice>
        <from usec="0" sec="1478840416"/>
        <to usec="0" sec="1478841299"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.37.126.152" dst_port="443"/>
        </slice>
        <from usec="0" sec="1478840472"/>
        <to usec="0" sec="1478840581"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="104.198.18.63" dst_ip="202.157.77.252" src_port="80"/>
        </slice>
        <from usec="0" sec="1478840593"/>
        <to usec="0" sec="1478840904"/>
    </anomaly>
    <anomaly type="notice" value="0.340411,1.370760,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="45.182.211.209" dst_port="110"/>
        </slice>
        <from usec="0" sec="1478841171"/>
        <to usec="0" sec="1478841249"/>
    </anomaly>
</admd:annotation>
