<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.172.243.15"/>
        </slice>
        <from usec="0" sec="1481519083"/>
        <to usec="0" sec="1481519533"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="107.33.17.244" dst_ip="163.34.80.166" src_port="2376" dst_port="44038" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519506"/>
        <to usec="0" sec="1481519547"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="49.107.15.242" dst_ip="163.34.56.73" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519117"/>
        <to usec="0" sec="1481519121"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.223.81.234"/>
        </slice>
        <from usec="0" sec="1481519623"/>
        <to usec="0" sec="1481519626"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.244.79.237"/>
        </slice>
        <from usec="0" sec="1481519674"/>
        <to usec="0" sec="1481519676"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.223.94.21"/>
        </slice>
        <from usec="0" sec="1481518835"/>
        <to usec="0" sec="1481518841"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.68.23"/>
        </slice>
        <from usec="0" sec="1481519292"/>
        <to usec="0" sec="1481519295"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="198.21.123.231" dst_ip="163.34.43.91" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519517"/>
        <to usec="0" sec="1481519521"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.223.66.25" dst_ip="31.13.62.85" src_port="51109" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519600"/>
        <to usec="0" sec="1481519617"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="110.128.133.231"/>
        </slice>
        <from usec="0" sec="1481519138"/>
        <to usec="0" sec="1481519140"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.39.227" dst_ip="210.131.117.205" dst_port="995" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519028"/>
        <to usec="0" sec="1481519598"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="210.156.14.225" dst_ip="104.146.85.45" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481518812"/>
        <to usec="0" sec="1481519586"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="68.139.193.225"/>
        </slice>
        <from usec="0" sec="1481519401"/>
        <to usec="0" sec="1481519404"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.202.24.216"/>
        </slice>
        <from usec="0" sec="1481519126"/>
        <to usec="0" sec="1481519128"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.202.125.208"/>
        </slice>
        <from usec="0" sec="1481519620"/>
        <to usec="0" sec="1481519663"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.223.35.202"/>
        </slice>
        <from usec="0" sec="1481518940"/>
        <to usec="0" sec="1481518946"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="131.232.165.214"/>
        </slice>
        <from usec="0" sec="1481518912"/>
        <to usec="0" sec="1481518914"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.66.37"/>
        </slice>
        <from usec="0" sec="1481519677"/>
        <to usec="0" sec="1481519696"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="221.37.139.36"/>
        </slice>
        <from usec="0" sec="1481518807"/>
        <to usec="0" sec="1481518813"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.99.205" dst_ip="199.14.38.180" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481518868"/>
        <to usec="0" sec="1481519659"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.202.125.223" dst_ip="151.101.102.128" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519348"/>
        <to usec="0" sec="1481519470"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.223.65.214"/>
        </slice>
        <from usec="0" sec="1481518815"/>
        <to usec="0" sec="1481518819"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.202.218.45" src_port="62505"/>
            <filter src_ip="133.202.218.45" dst_port="80"/>
        </slice>
        <from usec="0" sec="1481519026"/>
        <to usec="0" sec="1481519693"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.223.82.48"/>
        </slice>
        <from usec="0" sec="1481519473"/>
        <to usec="0" sec="1481519603"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.223.64.189"/>
        </slice>
        <from usec="0" sec="1481519283"/>
        <to usec="0" sec="1481519681"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.34.47.130" dst_ip="175.100.105.6" dst_port="80"/>
        </slice>
        <from usec="0" sec="1481518813"/>
        <to usec="0" sec="1481519684"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.223.80.123"/>
        </slice>
        <from usec="0" sec="1481518854"/>
        <to usec="0" sec="1481519630"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="210.132.187.68"/>
        </slice>
        <from usec="0" sec="1481518822"/>
        <to usec="0" sec="1481518938"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.34.193.134"/>
        </slice>
        <from usec="0" sec="1481518828"/>
        <to usec="0" sec="1481518830"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.223.37.131" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519102"/>
        <to usec="0" sec="1481519199"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="101.113.1.179"/>
        </slice>
        <from usec="0" sec="1481519000"/>
        <to usec="0" sec="1481519187"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.104.193.145" dst_ip="163.34.132.39" src_port="53461" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519618"/>
        <to usec="0" sec="1481519620"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.122.110" dst_ip="8.104.38.28" src_port="63279" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519611"/>
        <to usec="0" sec="1481519657"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.98.123.152"/>
        </slice>
        <from usec="0" sec="1481519282"/>
        <to usec="0" sec="1481519285"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="68.244.191.163" dst_ip="163.34.98.119" src_port="80" dst_port="59495" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519531"/>
        <to usec="0" sec="1481519532"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="203.91.53.125"/>
        </slice>
        <from usec="0" sec="1481518962"/>
        <to usec="0" sec="1481518964"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.126.52.119" dst_ip="163.34.97.185" src_port="443" dst_port="51694" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481518976"/>
        <to usec="0" sec="1481519551"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.223.71.119" dst_ip="5.10.242.52" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519362"/>
        <to usec="0" sec="1481519474"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="68.139.193.172"/>
        </slice>
        <from usec="0" sec="1481518902"/>
        <to usec="0" sec="1481519623"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="112.98.50.84" dst_ip="163.34.156.143" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519375"/>
        <to usec="0" sec="1481519378"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.223.64.142"/>
        </slice>
        <from usec="0" sec="1481519520"/>
        <to usec="0" sec="1481519594"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.223.36.140"/>
        </slice>
        <from usec="0" sec="1481519321"/>
        <to usec="0" sec="1481519326"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.223.37.187"/>
        </slice>
        <from usec="0" sec="1481518817"/>
        <to usec="0" sec="1481519615"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.37.185"/>
        </slice>
        <from usec="0" sec="1481519667"/>
        <to usec="0" sec="1481519670"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.223.69.133"/>
        </slice>
        <from usec="0" sec="1481518827"/>
        <to usec="0" sec="1481519288"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.223.95.89" dst_ip="54.191.158.89" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519570"/>
        <to usec="0" sec="1481519581"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.98.80.98"/>
        </slice>
        <from usec="0" sec="1481519087"/>
        <to usec="0" sec="1481519113"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.34.41.92" dst_ip="202.251.253.78" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519067"/>
        <to usec="0" sec="1481519070"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.244.77.131"/>
        </slice>
        <from usec="0" sec="1481518803"/>
        <to usec="0" sec="1481518809"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.202.195.126"/>
        </slice>
        <from usec="0" sec="1481519168"/>
        <to usec="0" sec="1481519170"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.223.84.9" dst_ip="198.53.73.58" src_port="54425" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519151"/>
        <to usec="0" sec="1481519260"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="61.74.216.126"/>
        </slice>
        <from usec="0" sec="1481518867"/>
        <to usec="0" sec="1481518869"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="126.115.179.125"/>
        </slice>
        <from usec="0" sec="1481518830"/>
        <to usec="0" sec="1481518834"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.84.10"/>
        </slice>
        <from usec="0" sec="1481519649"/>
        <to usec="0" sec="1481519651"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="54.199.34.254" dst_ip="163.34.99.205" src_port="80" dst_port="51757" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519575"/>
        <to usec="0" sec="1481519576"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="219.150.61.125"/>
        </slice>
        <from usec="0" sec="1481518841"/>
        <to usec="0" sec="1481519023"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.69.118"/>
        </slice>
        <from usec="0" sec="1481519439"/>
        <to usec="0" sec="1481519441"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.121.241"/>
        </slice>
        <from usec="0" sec="1481518877"/>
        <to usec="0" sec="1481519420"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.34.98.240" dst_port="443"/>
            <filter src_ip="163.34.98.240" dst_ip="180.106.103.251" dst_port="80"/>
        </slice>
        <from usec="0" sec="1481519096"/>
        <to usec="0" sec="1481519683"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.54.149"/>
        </slice>
        <from usec="0" sec="1481519301"/>
        <to usec="0" sec="1481519303"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.194.148" dst_ip="108.127.81.189" src_port="56740" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519103"/>
        <to usec="0" sec="1481519106"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="182.83.88.151"/>
        </slice>
        <from usec="0" sec="1481518972"/>
        <to usec="0" sec="1481518976"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="121.172.66.237"/>
        </slice>
        <from usec="0" sec="1481518803"/>
        <to usec="0" sec="1481518805"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.223.70.228"/>
        </slice>
        <from usec="0" sec="1481518939"/>
        <to usec="0" sec="1481519166"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.172.104.228"/>
        </slice>
        <from usec="0" sec="1481519544"/>
        <to usec="0" sec="1481519546"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="49.98.89.30"/>
        </slice>
        <from usec="0" sec="1481518952"/>
        <to usec="0" sec="1481518954"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.246.54.181" dst_ip="163.34.128.53" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519374"/>
        <to usec="0" sec="1481519376"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.34.183.84" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519184"/>
        <to usec="0" sec="1481519529"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="1.78.151.77"/>
        </slice>
        <from usec="0" sec="1481519006"/>
        <to usec="0" sec="1481519158"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.196.173.76"/>
        </slice>
        <from usec="0" sec="1481519149"/>
        <to usec="0" sec="1481519154"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.19.55"/>
        </slice>
        <from usec="0" sec="1481518999"/>
        <to usec="0" sec="1481519001"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.223.90.161"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481519644"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.65.74"/>
        </slice>
        <from usec="0" sec="1481518882"/>
        <to usec="0" sec="1481518884"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.34.99.45" dst_ip="173.205.167.1" src_port="56220" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519472"/>
        <to usec="0" sec="1481519505"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="117.107.44.172" dst_ip="163.34.46.81" src_port="80" dst_port="55504" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519546"/>
        <to usec="0" sec="1481519556"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,010,1 0 0 0 0 0 0 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="175.121.20.61"/>
        </slice>
        <from usec="0" sec="1481519134"/>
        <to usec="0" sec="1481519138"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,011,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="131.98.3.33"/>
        </slice>
        <from usec="0" sec="1481519166"/>
        <to usec="0" sec="1481519168"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="124.19.83.160"/>
        </slice>
        <from usec="0" sec="1481519000"/>
        <to usec="0" sec="1481519003"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.223.35.58"/>
        </slice>
        <from usec="0" sec="1481519599"/>
        <to usec="0" sec="1481519610"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.223.84.115" src_port="14082"/>
            <filter src_ip="133.223.84.115" dst_ip="216.207.62.143" dst_port="443"/>
        </slice>
        <from usec="0" sec="1481519220"/>
        <to usec="0" sec="1481519669"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.172.69.117"/>
        </slice>
        <from usec="0" sec="1481518832"/>
        <to usec="0" sec="1481518837"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.215.219.138" dst_ip="163.34.192.75" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519508"/>
        <to usec="0" sec="1481519551"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.91.47.121" dst_ip="202.244.77.150" src_port="14056" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519145"/>
        <to usec="0" sec="1481519147"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.223.83.51"/>
        </slice>
        <from usec="0" sec="1481519693"/>
        <to usec="0" sec="1481519698"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.202.167.129"/>
        </slice>
        <from usec="0" sec="1481519005"/>
        <to usec="0" sec="1481519037"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="183.177.135.142" dst_ip="163.34.43.143" src_port="80" dst_port="62369" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519532"/>
        <to usec="0" sec="1481519534"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.136.34.144" dst_ip="163.34.128.54" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519576"/>
        <to usec="0" sec="1481519601"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.34.65.18"/>
        </slice>
        <from usec="0" sec="1481519231"/>
        <to usec="0" sec="1481519640"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="111.191.216.86"/>
        </slice>
        <from usec="0" sec="1481519234"/>
        <to usec="0" sec="1481519236"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,054,1 0 0 0 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="157.172.213.40" dst_ip="17.143.41.226" dst_port="443"/>
        </slice>
        <from usec="0" sec="1481519053"/>
        <to usec="0" sec="1481519648"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.101.237.36" dst_ip="163.34.128.54" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519442"/>
        <to usec="0" sec="1481519445"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.79.232.101"/>
        </slice>
        <from usec="0" sec="1481519503"/>
        <to usec="0" sec="1481519505"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="203.95.138.156"/>
        </slice>
        <from usec="0" sec="1481519504"/>
        <to usec="0" sec="1481519507"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="68.139.193.29"/>
        </slice>
        <from usec="0" sec="1481519307"/>
        <to usec="0" sec="1481519309"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="211.128.233.98"/>
        </slice>
        <from usec="0" sec="1481518859"/>
        <to usec="0" sec="1481518869"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.69.97" dst_ip="8.104.38.9" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519206"/>
        <to usec="0" sec="1481519340"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.65.35" dst_ip="52.212.157.210" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481518947"/>
        <to usec="0" sec="1481519359"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.132.237.119" dst_ip="163.34.128.53" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519599"/>
        <to usec="0" sec="1481519601"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="117.117.65.57" dst_ip="163.34.15.80" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519028"/>
        <to usec="0" sec="1481519030"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.141.3"/>
        </slice>
        <from usec="0" sec="1481518826"/>
        <to usec="0" sec="1481518912"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.34.192.154" dst_ip="52.221.41.180" src_port="59148" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481518833"/>
        <to usec="0" sec="1481519063"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.223.81.21"/>
        </slice>
        <from usec="0" sec="1481519461"/>
        <to usec="0" sec="1481519480"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.172.101.73"/>
        </slice>
        <from usec="0" sec="1481519266"/>
        <to usec="0" sec="1481519270"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="183.177.67.87" dst_ip="163.34.192.178" src_port="993" dst_port="56784" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519509"/>
        <to usec="0" sec="1481519511"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="131.98.115.167" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519448"/>
        <to usec="0" sec="1481519453"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="17.239.153.251" dst_ip="17.239.153.251" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481518950"/>
        <to usec="0" sec="1481519697"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.95.143.12" dst_ip="203.95.143.12" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481518948"/>
        <to usec="0" sec="1481519584"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.95.134.14" dst_ip="203.95.134.14" src_port="62052" proto="udp"/>
        </slice>
        <from usec="0" sec="1481519393"/>
        <to usec="0" sec="1481519698"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.95.143.31"/>
        </slice>
        <from usec="0" sec="1481518942"/>
        <to usec="0" sec="1481518947"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="17.239.153.201" dst_ip="17.239.153.201" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481518960"/>
        <to usec="0" sec="1481519695"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="52.212.157.210" dst_ip="52.212.157.210" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481518982"/>
        <to usec="0" sec="1481519069"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.34.238.49" dst_port="993"/>
        </slice>
        <from usec="0" sec="1481518904"/>
        <to usec="0" sec="1481519526"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="157.112.118.50" dst_ip="157.112.118.50" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481518863"/>
        <to usec="0" sec="1481519679"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="31.13.56.42" dst_ip="31.13.56.42" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481518840"/>
        <to usec="0" sec="1481519692"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.95.135.216" dst_port="80"/>
        </slice>
        <from usec="0" sec="1481518869"/>
        <to usec="0" sec="1481519664"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="52.204.184.94" dst_port="443"/>
            <filter dst_ip="52.6.235.40" dst_port="443"/>
        </slice>
        <from usec="0" sec="1481518801"/>
        <to usec="0" sec="1481519541"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.95.137.246" dst_port="80"/>
        </slice>
        <from usec="0" sec="1481518804"/>
        <to usec="0" sec="1481519578"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.95.131.71" dst_port="123"/>
            <filter src_ip="219.71.215.23" dst_ip="203.95.131.71" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481519700"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.95.135.105" dst_port="80"/>
        </slice>
        <from usec="0" sec="1481519184"/>
        <to usec="0" sec="1481519643"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="182.80.140.3"/>
        </slice>
        <from usec="0" sec="1481518863"/>
        <to usec="0" sec="1481518865"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="70.82.117.249"/>
        </slice>
        <from usec="0" sec="1481519625"/>
        <to usec="0" sec="1481519684"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.94.211.11"/>
        </slice>
        <from usec="0" sec="1481519602"/>
        <to usec="0" sec="1481519604"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="131.98.52.16"/>
        </slice>
        <from usec="0" sec="1481519637"/>
        <to usec="0" sec="1481519639"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.223.94.26"/>
        </slice>
        <from usec="0" sec="1481519589"/>
        <to usec="0" sec="1481519596"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.202.180.49"/>
        </slice>
        <from usec="0" sec="1481518823"/>
        <to usec="0" sec="1481518826"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.35.196"/>
        </slice>
        <from usec="0" sec="1481519058"/>
        <to usec="0" sec="1481519060"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.202.215.216"/>
        </slice>
        <from usec="0" sec="1481519383"/>
        <to usec="0" sec="1481519387"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.89.12.43"/>
        </slice>
        <from usec="0" sec="1481519211"/>
        <to usec="0" sec="1481519214"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="14.60.238.34"/>
        </slice>
        <from usec="0" sec="1481519390"/>
        <to usec="0" sec="1481519392"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.37.222"/>
        </slice>
        <from usec="0" sec="1481519121"/>
        <to usec="0" sec="1481519123"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.34.192.36"/>
        </slice>
        <from usec="0" sec="1481519092"/>
        <to usec="0" sec="1481519094"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.202.129.182"/>
        </slice>
        <from usec="0" sec="1481518886"/>
        <to usec="0" sec="1481518895"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.65.130"/>
        </slice>
        <from usec="0" sec="1481519500"/>
        <to usec="0" sec="1481519559"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.81.132"/>
        </slice>
        <from usec="0" sec="1481519374"/>
        <to usec="0" sec="1481519377"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="61.130.121.135"/>
        </slice>
        <from usec="0" sec="1481519696"/>
        <to usec="0" sec="1481519698"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="61.142.15.122"/>
        </slice>
        <from usec="0" sec="1481518931"/>
        <to usec="0" sec="1481518933"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="61.122.189.101"/>
        </slice>
        <from usec="0" sec="1481518806"/>
        <to usec="0" sec="1481519667"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.172.89.157"/>
        </slice>
        <from usec="0" sec="1481518952"/>
        <to usec="0" sec="1481519354"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.223.84.159" dst_ip="148.39.12.166" dst_port="443"/>
        </slice>
        <from usec="0" sec="1481518805"/>
        <to usec="0" sec="1481519592"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.77.18.104"/>
        </slice>
        <from usec="0" sec="1481519176"/>
        <to usec="0" sec="1481519184"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.108.148"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481519699"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.223.67.164"/>
        </slice>
        <from usec="0" sec="1481518835"/>
        <to usec="0" sec="1481518837"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.121.250"/>
        </slice>
        <from usec="0" sec="1481519555"/>
        <to usec="0" sec="1481519557"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.172.69.10"/>
        </slice>
        <from usec="0" sec="1481519553"/>
        <to usec="0" sec="1481519556"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.187.133"/>
        </slice>
        <from usec="0" sec="1481519625"/>
        <to usec="0" sec="1481519627"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.234.138"/>
        </slice>
        <from usec="0" sec="1481519698"/>
        <to usec="0" sec="1481519701"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="172.143.36.186" dst_ip="203.95.140.89" dst_port="443"/>
            <filter src_ip="206.122.241.113" dst_ip="203.95.140.89" dst_port="443"/>
        </slice>
        <from usec="0" sec="1481518802"/>
        <to usec="0" sec="1481519701"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.223.52.216"/>
        </slice>
        <from usec="0" sec="1481519223"/>
        <to usec="0" sec="1481519268"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.223.95.163"/>
        </slice>
        <from usec="0" sec="1481518966"/>
        <to usec="0" sec="1481519561"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.202.195.87"/>
        </slice>
        <from usec="0" sec="1481519264"/>
        <to usec="0" sec="1481519266"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.223.25.47" dst_ip="75.103.157.68" dst_port="443"/>
        </slice>
        <from usec="0" sec="1481518905"/>
        <to usec="0" sec="1481519654"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.223.35.57"/>
        </slice>
        <from usec="0" sec="1481518864"/>
        <to usec="0" sec="1481518896"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="118.233.221.74"/>
        </slice>
        <from usec="0" sec="1481519333"/>
        <to usec="0" sec="1481519372"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.172.250.167" dst_ip="17.176.67.243" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519067"/>
        <to usec="0" sec="1481519305"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.172.40.122" dst_ip="17.119.205.253" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519606"/>
        <to usec="0" sec="1481519608"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="216.82.59.163"/>
        </slice>
        <from usec="0" sec="1481519163"/>
        <to usec="0" sec="1481519172"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="202.239.158.186" dst_ip="163.34.128.53" dst_port="443"/>
            <filter src_ip="210.132.237.119" dst_ip="163.34.128.53" dst_port="443"/>
        </slice>
        <from usec="0" sec="1481519613"/>
        <to usec="0" sec="1481519615"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="203.95.129.22" dst_ip="172.144.204.35" dst_port="443"/>
            <filter src_ip="133.223.12.126" dst_ip="172.144.204.35" dst_port="443"/>
        </slice>
        <from usec="0" sec="1481518823"/>
        <to usec="0" sec="1481519661"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="49.98.17.176" dst_ip="202.250.170.67" dst_port="443"/>
            <filter src_ip="126.104.63.44" dst_ip="202.250.170.67" dst_port="443"/>
        </slice>
        <from usec="0" sec="1481519157"/>
        <to usec="0" sec="1481519517"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="23.97.161.1"/>
        </slice>
        <from usec="0" sec="1481518807"/>
        <to usec="0" sec="1481519294"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.95.133.69" dst_port="53"/>
        </slice>
        <from usec="0" sec="1481518802"/>
        <to usec="0" sec="1481519690"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.223.94.58" dst_ip="52.205.149.69" dst_port="443"/>
        </slice>
        <from usec="0" sec="1481519676"/>
        <to usec="0" sec="1481519701"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.223.68.9" dst_ip="81.16.214.102" dst_port="443"/>
        </slice>
        <from usec="0" sec="1481518940"/>
        <to usec="0" sec="1481519016"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.70.117"/>
        </slice>
        <from usec="0" sec="1481519591"/>
        <to usec="0" sec="1481519593"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.35.145"/>
        </slice>
        <from usec="0" sec="1481519086"/>
        <to usec="0" sec="1481519166"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.68.201"/>
        </slice>
        <from usec="0" sec="1481518846"/>
        <to usec="0" sec="1481518876"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.83.94"/>
        </slice>
        <from usec="0" sec="1481519283"/>
        <to usec="0" sec="1481519298"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.95.191" dst_port="443"/>
            <filter src_ip="133.223.95.191" dst_port="80"/>
        </slice>
        <from usec="0" sec="1481518947"/>
        <to usec="0" sec="1481519014"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="219.150.36.201"/>
        </slice>
        <from usec="0" sec="1481518819"/>
        <to usec="0" sec="1481518838"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.34.161.117"/>
        </slice>
        <from usec="0" sec="1481519655"/>
        <to usec="0" sec="1481519691"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACKt">
        <slice>
            <filter src_ip="133.223.134.234"/>
        </slice>
        <from usec="0" sec="1481519079"/>
        <to usec="0" sec="1481519081"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.223.68.156" dst_port="80"/>
        </slice>
        <from usec="0" sec="1481519391"/>
        <to usec="0" sec="1481519674"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="192.184.233.134"/>
        </slice>
        <from usec="0" sec="1481518948"/>
        <to usec="0" sec="1481519601"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.172.255.87"/>
        </slice>
        <from usec="0" sec="1481518864"/>
        <to usec="0" sec="1481518866"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.90.99"/>
        </slice>
        <from usec="0" sec="1481519647"/>
        <to usec="0" sec="1481519651"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.29.169.145"/>
        </slice>
        <from usec="0" sec="1481519174"/>
        <to usec="0" sec="1481519176"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.202.224.139"/>
        </slice>
        <from usec="0" sec="1481519530"/>
        <to usec="0" sec="1481519532"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.202.169.173"/>
        </slice>
        <from usec="0" sec="1481519317"/>
        <to usec="0" sec="1481519336"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="133.202.42.232" dst_ip="17.186.48.171" src_port="50300" dst_port="993"/>
            <filter src_ip="133.202.42.232" dst_ip="17.186.48.171" src_port="50298" dst_port="993"/>
            <filter src_ip="133.223.65.168" dst_ip="17.186.48.171" src_port="63783" dst_port="993"/>
            <filter src_ip="133.223.65.168" dst_ip="17.186.48.171" src_port="63772" dst_port="993"/>
            <filter src_ip="157.172.15.211" dst_ip="17.186.48.171" src_port="31753" dst_port="993"/>
        </slice>
        <from usec="0" sec="1481519689"/>
        <to usec="0" sec="1481519697"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.172.36.254"/>
        </slice>
        <from usec="0" sec="1481519133"/>
        <to usec="0" sec="1481519234"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.98.81.248"/>
        </slice>
        <from usec="0" sec="1481519122"/>
        <to usec="0" sec="1481519124"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.172.242.145"/>
        </slice>
        <from usec="0" sec="1481519652"/>
        <to usec="0" sec="1481519654"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.136.171.68"/>
        </slice>
        <from usec="0" sec="1481519396"/>
        <to usec="0" sec="1481519398"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.34.81.100"/>
        </slice>
        <from usec="0" sec="1481519153"/>
        <to usec="0" sec="1481519155"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.250.149.225"/>
        </slice>
        <from usec="0" sec="1481519339"/>
        <to usec="0" sec="1481519365"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.34.227.91"/>
        </slice>
        <from usec="0" sec="1481519297"/>
        <to usec="0" sec="1481519299"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.28.14"/>
        </slice>
        <from usec="0" sec="1481518999"/>
        <to usec="0" sec="1481519001"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.223.132.12"/>
        </slice>
        <from usec="0" sec="1481518809"/>
        <to usec="0" sec="1481518811"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="185.104.201.254"/>
        </slice>
        <from usec="0" sec="1481519689"/>
        <to usec="0" sec="1481519697"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.125.251"/>
        </slice>
        <from usec="0" sec="1481518831"/>
        <to usec="0" sec="1481518833"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,004,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="210.220.104.240"/>
        </slice>
        <from usec="0" sec="1481518840"/>
        <to usec="0" sec="1481518843"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.83.183.9"/>
        </slice>
        <from usec="0" sec="1481519426"/>
        <to usec="0" sec="1481519427"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="14.4.14.5"/>
        </slice>
        <from usec="0" sec="1481518930"/>
        <to usec="0" sec="1481519295"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="54.128.231.245"/>
        </slice>
        <from usec="0" sec="1481519416"/>
        <to usec="0" sec="1481519418"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="118.252.204.246"/>
        </slice>
        <from usec="0" sec="1481519669"/>
        <to usec="0" sec="1481519671"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="178.248.205.250"/>
        </slice>
        <from usec="0" sec="1481519032"/>
        <to usec="0" sec="1481519039"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.234.10"/>
        </slice>
        <from usec="0" sec="1481518884"/>
        <to usec="0" sec="1481518886"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.5.248"/>
        </slice>
        <from usec="0" sec="1481519105"/>
        <to usec="0" sec="1481519107"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="50.27.79.252"/>
        </slice>
        <from usec="0" sec="1481518967"/>
        <to usec="0" sec="1481519575"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,004,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="108.237.227.18"/>
        </slice>
        <from usec="0" sec="1481519421"/>
        <to usec="0" sec="1481519423"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,011,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.25.234"/>
        </slice>
        <from usec="0" sec="1481519621"/>
        <to usec="0" sec="1481519623"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.34.192.21"/>
        </slice>
        <from usec="0" sec="1481519430"/>
        <to usec="0" sec="1481519432"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.34.132.21"/>
        </slice>
        <from usec="0" sec="1481518856"/>
        <to usec="0" sec="1481518859"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.186.146.18"/>
        </slice>
        <from usec="0" sec="1481518839"/>
        <to usec="0" sec="1481518841"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.223.12.19"/>
        </slice>
        <from usec="0" sec="1481519225"/>
        <to usec="0" sec="1481519369"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.202.161.232"/>
        </slice>
        <from usec="0" sec="1481518808"/>
        <to usec="0" sec="1481518810"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.34.236.24"/>
        </slice>
        <from usec="0" sec="1481519209"/>
        <to usec="0" sec="1481519211"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.94.25"/>
        </slice>
        <from usec="0" sec="1481519141"/>
        <to usec="0" sec="1481519143"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.196.167.229"/>
        </slice>
        <from usec="0" sec="1481519177"/>
        <to usec="0" sec="1481519179"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="54.128.231.226"/>
        </slice>
        <from usec="0" sec="1481519312"/>
        <to usec="0" sec="1481519314"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.23.226"/>
        </slice>
        <from usec="0" sec="1481518838"/>
        <to usec="0" sec="1481519441"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.244.75.28"/>
        </slice>
        <from usec="0" sec="1481518801"/>
        <to usec="0" sec="1481519583"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.34.97.227"/>
        </slice>
        <from usec="0" sec="1481519600"/>
        <to usec="0" sec="1481519602"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.223.17.224"/>
        </slice>
        <from usec="0" sec="1481519069"/>
        <to usec="0" sec="1481519071"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.81.218"/>
        </slice>
        <from usec="0" sec="1481519036"/>
        <to usec="0" sec="1481519038"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.34.80.45"/>
        </slice>
        <from usec="0" sec="1481519172"/>
        <to usec="0" sec="1481519174"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.82.47"/>
        </slice>
        <from usec="0" sec="1481519633"/>
        <to usec="0" sec="1481519635"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.44.49"/>
        </slice>
        <from usec="0" sec="1481519613"/>
        <to usec="0" sec="1481519615"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.202.9.221"/>
        </slice>
        <from usec="0" sec="1481519548"/>
        <to usec="0" sec="1481519550"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="1.75.201.218"/>
        </slice>
        <from usec="0" sec="1481518979"/>
        <to usec="0" sec="1481518981"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="181.221.65.62"/>
        </slice>
        <from usec="0" sec="1481519649"/>
        <to usec="0" sec="1481519651"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.70.33"/>
        </slice>
        <from usec="0" sec="1481519465"/>
        <to usec="0" sec="1481519467"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="68.4.43.57"/>
        </slice>
        <from usec="0" sec="1481518863"/>
        <to usec="0" sec="1481518865"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.34.42.56"/>
        </slice>
        <from usec="0" sec="1481518902"/>
        <to usec="0" sec="1481519145"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.34.37.217"/>
        </slice>
        <from usec="0" sec="1481519599"/>
        <to usec="0" sec="1481519601"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="77.91.31.219"/>
        </slice>
        <from usec="0" sec="1481519349"/>
        <to usec="0" sec="1481519360"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.25.205"/>
        </slice>
        <from usec="0" sec="1481519591"/>
        <to usec="0" sec="1481519695"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.34.194.49"/>
        </slice>
        <from usec="0" sec="1481519513"/>
        <to usec="0" sec="1481519515"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.70.54"/>
        </slice>
        <from usec="0" sec="1481518806"/>
        <to usec="0" sec="1481518808"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.83.206"/>
        </slice>
        <from usec="0" sec="1481518812"/>
        <to usec="0" sec="1481518815"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.244.78.47"/>
        </slice>
        <from usec="0" sec="1481518847"/>
        <to usec="0" sec="1481518849"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.37.207"/>
        </slice>
        <from usec="0" sec="1481519681"/>
        <to usec="0" sec="1481519683"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.92.208"/>
        </slice>
        <from usec="0" sec="1481518858"/>
        <to usec="0" sec="1481518860"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="207.194.63.203"/>
        </slice>
        <from usec="0" sec="1481519121"/>
        <to usec="0" sec="1481519123"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="38.89.2.53" dst_port="80"/>
        </slice>
        <from usec="0" sec="1481518843"/>
        <to usec="0" sec="1481519553"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.235.48"/>
        </slice>
        <from usec="0" sec="1481518807"/>
        <to usec="0" sec="1481518809"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.34.41.36"/>
        </slice>
        <from usec="0" sec="1481519688"/>
        <to usec="0" sec="1481519690"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.69.197"/>
        </slice>
        <from usec="0" sec="1481518923"/>
        <to usec="0" sec="1481518925"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.106.123.36"/>
        </slice>
        <from usec="0" sec="1481519307"/>
        <to usec="0" sec="1481519309"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.95.129.221"/>
        </slice>
        <from usec="0" sec="1481519009"/>
        <to usec="0" sec="1481519011"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.34.47.221"/>
        </slice>
        <from usec="0" sec="1481519257"/>
        <to usec="0" sec="1481519259"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="106.249.78.34"/>
        </slice>
        <from usec="0" sec="1481519457"/>
        <to usec="0" sec="1481519459"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="14.111.168.62"/>
        </slice>
        <from usec="0" sec="1481519054"/>
        <to usec="0" sec="1481519056"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="36.197.251.63"/>
        </slice>
        <from usec="0" sec="1481519018"/>
        <to usec="0" sec="1481519022"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.95.120"/>
        </slice>
        <from usec="0" sec="1481519452"/>
        <to usec="0" sec="1481519455"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.223.186.76"/>
        </slice>
        <from usec="0" sec="1481518891"/>
        <to usec="0" sec="1481518995"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="223.103.56.112"/>
        </slice>
        <from usec="0" sec="1481519042"/>
        <to usec="0" sec="1481519549"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.94.75"/>
        </slice>
        <from usec="0" sec="1481518945"/>
        <to usec="0" sec="1481518947"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.36.177"/>
        </slice>
        <from usec="0" sec="1481519084"/>
        <to usec="0" sec="1481519688"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.66.70"/>
        </slice>
        <from usec="0" sec="1481519364"/>
        <to usec="0" sec="1481519366"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.82.126"/>
        </slice>
        <from usec="0" sec="1481519083"/>
        <to usec="0" sec="1481519085"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.84.129"/>
        </slice>
        <from usec="0" sec="1481518812"/>
        <to usec="0" sec="1481518814"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.70.120"/>
        </slice>
        <from usec="0" sec="1481519686"/>
        <to usec="0" sec="1481519688"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.34.47.135"/>
        </slice>
        <from usec="0" sec="1481519311"/>
        <to usec="0" sec="1481519313"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="122.197.10.71"/>
        </slice>
        <from usec="0" sec="1481519565"/>
        <to usec="0" sec="1481519567"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.34.195.186"/>
        </slice>
        <from usec="0" sec="1481518823"/>
        <to usec="0" sec="1481518825"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.34.43.137"/>
        </slice>
        <from usec="0" sec="1481519043"/>
        <to usec="0" sec="1481519046"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.94.68"/>
        </slice>
        <from usec="0" sec="1481518832"/>
        <to usec="0" sec="1481518834"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.244.75.124"/>
        </slice>
        <from usec="0" sec="1481519656"/>
        <to usec="0" sec="1481519658"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.34.43.140"/>
        </slice>
        <from usec="0" sec="1481518920"/>
        <to usec="0" sec="1481518922"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.37.147"/>
        </slice>
        <from usec="0" sec="1481518808"/>
        <to usec="0" sec="1481518810"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="202.244.73.144"/>
        </slice>
        <from usec="0" sec="1481519533"/>
        <to usec="0" sec="1481519535"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="59.32.78.84"/>
        </slice>
        <from usec="0" sec="1481519196"/>
        <to usec="0" sec="1481519655"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="176.26.220.108"/>
        </slice>
        <from usec="0" sec="1481518846"/>
        <to usec="0" sec="1481518974"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.85.168"/>
        </slice>
        <from usec="0" sec="1481519009"/>
        <to usec="0" sec="1481519011"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="14.10.44.83"/>
        </slice>
        <from usec="0" sec="1481519206"/>
        <to usec="0" sec="1481519497"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="183.221.13.169"/>
        </slice>
        <from usec="0" sec="1481519697"/>
        <to usec="0" sec="1481519699"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.223.36.175"/>
        </slice>
        <from usec="0" sec="1481519119"/>
        <to usec="0" sec="1481519121"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.66.80"/>
        </slice>
        <from usec="0" sec="1481519160"/>
        <to usec="0" sec="1481519162"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.67.155"/>
        </slice>
        <from usec="0" sec="1481519308"/>
        <to usec="0" sec="1481519310"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.28.103"/>
        </slice>
        <from usec="0" sec="1481519458"/>
        <to usec="0" sec="1481519460"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="123.98.36.89"/>
        </slice>
        <from usec="0" sec="1481518951"/>
        <to usec="0" sec="1481518953"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.202.184.102"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518802"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.37.152"/>
        </slice>
        <from usec="0" sec="1481518879"/>
        <to usec="0" sec="1481518881"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.70.103"/>
        </slice>
        <from usec="0" sec="1481518809"/>
        <to usec="0" sec="1481518811"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.141.167"/>
        </slice>
        <from usec="0" sec="1481519146"/>
        <to usec="0" sec="1481519148"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.69.162"/>
        </slice>
        <from usec="0" sec="1481519066"/>
        <to usec="0" sec="1481519068"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_port="443"/>
            <filter dst_ip="17.176.74.8" dst_port="993"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481519692"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.106.173.160"/>
        </slice>
        <from usec="0" sec="1481519688"/>
        <to usec="0" sec="1481519690"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="111.0.36.159"/>
        </slice>
        <from usec="0" sec="1481519604"/>
        <to usec="0" sec="1481519606"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.69.160"/>
        </slice>
        <from usec="0" sec="1481518804"/>
        <to usec="0" sec="1481518807"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.83.160"/>
        </slice>
        <from usec="0" sec="1481519658"/>
        <to usec="0" sec="1481519660"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="115.24.180.96"/>
        </slice>
        <from usec="0" sec="1481519554"/>
        <to usec="0" sec="1481519556"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.34.58.80"/>
        </slice>
        <from usec="0" sec="1481519413"/>
        <to usec="0" sec="1481519415"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.34.192.103"/>
        </slice>
        <from usec="0" sec="1481518998"/>
        <to usec="0" sec="1481519000"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="110.133.148.172"/>
        </slice>
        <from usec="0" sec="1481519172"/>
        <to usec="0" sec="1481519190"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="14.111.156.111"/>
        </slice>
        <from usec="0" sec="1481519131"/>
        <to usec="0" sec="1481519133"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.67.179"/>
        </slice>
        <from usec="0" sec="1481519318"/>
        <to usec="0" sec="1481519320"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.172.240.189"/>
        </slice>
        <from usec="0" sec="1481519005"/>
        <to usec="0" sec="1481519007"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.95.143.126"/>
        </slice>
        <from usec="0" sec="1481518945"/>
        <to usec="0" sec="1481519174"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.86.104"/>
        </slice>
        <from usec="0" sec="1481519574"/>
        <to usec="0" sec="1481519576"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.34.48.74"/>
        </slice>
        <from usec="0" sec="1481518965"/>
        <to usec="0" sec="1481518967"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.172.242.118"/>
        </slice>
        <from usec="0" sec="1481518927"/>
        <to usec="0" sec="1481518929"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.35.187"/>
        </slice>
        <from usec="0" sec="1481518920"/>
        <to usec="0" sec="1481518922"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.39.145"/>
        </slice>
        <from usec="0" sec="1481519525"/>
        <to usec="0" sec="1481519527"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.85.129"/>
        </slice>
        <from usec="0" sec="1481519060"/>
        <to usec="0" sec="1481519062"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.71.108"/>
        </slice>
        <from usec="0" sec="1481519668"/>
        <to usec="0" sec="1481519670"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.83.181.174"/>
        </slice>
        <from usec="0" sec="1481519532"/>
        <to usec="0" sec="1481519534"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.65.169"/>
        </slice>
        <from usec="0" sec="1481519672"/>
        <to usec="0" sec="1481519674"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACKt">
        <slice>
            <filter src_ip="133.223.91.174"/>
        </slice>
        <from usec="0" sec="1481518802"/>
        <to usec="0" sec="1481518814"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.95.87"/>
        </slice>
        <from usec="0" sec="1481518897"/>
        <to usec="0" sec="1481518899"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.90.89"/>
        </slice>
        <from usec="0" sec="1481519235"/>
        <to usec="0" sec="1481519237"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.34.51.123"/>
        </slice>
        <from usec="0" sec="1481519395"/>
        <to usec="0" sec="1481519397"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.223.110.70"/>
        </slice>
        <from usec="0" sec="1481519074"/>
        <to usec="0" sec="1481519076"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="209.49.204.102"/>
        </slice>
        <from usec="0" sec="1481519467"/>
        <to usec="0" sec="1481519469"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.34.97.167"/>
        </slice>
        <from usec="0" sec="1481519154"/>
        <to usec="0" sec="1481519156"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.80.66"/>
        </slice>
        <from usec="0" sec="1481519326"/>
        <to usec="0" sec="1481519328"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,004,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="64.166.174.126"/>
        </slice>
        <from usec="0" sec="1481519276"/>
        <to usec="0" sec="1481519278"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.71.96"/>
        </slice>
        <from usec="0" sec="1481519238"/>
        <to usec="0" sec="1481519240"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.85.159"/>
        </slice>
        <from usec="0" sec="1481519492"/>
        <to usec="0" sec="1481519495"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.81.113"/>
        </slice>
        <from usec="0" sec="1481519032"/>
        <to usec="0" sec="1481519034"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="210.156.15.2"/>
        </slice>
        <from usec="0" sec="1481519066"/>
        <to usec="0" sec="1481519068"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.34.195.120"/>
        </slice>
        <from usec="0" sec="1481519028"/>
        <to usec="0" sec="1481519048"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="121.53.197.3"/>
        </slice>
        <from usec="0" sec="1481518816"/>
        <to usec="0" sec="1481518818"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.172.97.123"/>
        </slice>
        <from usec="0" sec="1481519297"/>
        <to usec="0" sec="1481519299"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.35.121"/>
        </slice>
        <from usec="0" sec="1481518885"/>
        <to usec="0" sec="1481518887"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.132.241.233" dst_port="443"/>
        </slice>
        <from usec="0" sec="1481519107"/>
        <to usec="0" sec="1481519547"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,004,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="208.90.119.9"/>
        </slice>
        <from usec="0" sec="1481519613"/>
        <to usec="0" sec="1481519615"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="220.106.75.126"/>
        </slice>
        <from usec="0" sec="1481519568"/>
        <to usec="0" sec="1481519570"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.83.181.8"/>
        </slice>
        <from usec="0" sec="1481519291"/>
        <to usec="0" sec="1481519293"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.172.97.120"/>
        </slice>
        <from usec="0" sec="1481518930"/>
        <to usec="0" sec="1481518932"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.223.69.119"/>
        </slice>
        <from usec="0" sec="1481519133"/>
        <to usec="0" sec="1481519135"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.68.245"/>
        </slice>
        <from usec="0" sec="1481518804"/>
        <to usec="0" sec="1481518806"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.172.25.119"/>
        </slice>
        <from usec="0" sec="1481519518"/>
        <to usec="0" sec="1481519520"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="183.185.91.122"/>
        </slice>
        <from usec="0" sec="1481519215"/>
        <to usec="0" sec="1481519217"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.82.251"/>
        </slice>
        <from usec="0" sec="1481519342"/>
        <to usec="0" sec="1481519344"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.34.112.4"/>
        </slice>
        <from usec="0" sec="1481519643"/>
        <to usec="0" sec="1481519645"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.187.131"/>
        </slice>
        <from usec="0" sec="1481519270"/>
        <to usec="0" sec="1481519272"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,901,1 0 0 0 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="1.220.95.125"/>
        </slice>
        <from usec="0" sec="1481519360"/>
        <to usec="0" sec="1481519362"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="178.116.9.13"/>
        </slice>
        <from usec="0" sec="1481519304"/>
        <to usec="0" sec="1481519306"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.94.131"/>
        </slice>
        <from usec="0" sec="1481519030"/>
        <to usec="0" sec="1481519032"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="119.3.209.106"/>
        </slice>
        <from usec="0" sec="1481519526"/>
        <to usec="0" sec="1481519528"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="106.198.233.109"/>
        </slice>
        <from usec="0" sec="1481519504"/>
        <to usec="0" sec="1481519506"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.35.109"/>
        </slice>
        <from usec="0" sec="1481518949"/>
        <to usec="0" sec="1481518951"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.68.237"/>
        </slice>
        <from usec="0" sec="1481519025"/>
        <to usec="0" sec="1481519027"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.91.19"/>
        </slice>
        <from usec="0" sec="1481519098"/>
        <to usec="0" sec="1481519100"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.34.193.20"/>
        </slice>
        <from usec="0" sec="1481519314"/>
        <to usec="0" sec="1481519316"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.35.111"/>
        </slice>
        <from usec="0" sec="1481519410"/>
        <to usec="0" sec="1481519413"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,011,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.34.144"/>
        </slice>
        <from usec="0" sec="1481518968"/>
        <to usec="0" sec="1481518970"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.84.23"/>
        </slice>
        <from usec="0" sec="1481518938"/>
        <to usec="0" sec="1481518940"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.90.151"/>
        </slice>
        <from usec="0" sec="1481519698"/>
        <to usec="0" sec="1481519701"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.121.232"/>
        </slice>
        <from usec="0" sec="1481519498"/>
        <to usec="0" sec="1481519500"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="49.98.111.101"/>
        </slice>
        <from usec="0" sec="1481519146"/>
        <to usec="0" sec="1481519149"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.35.100"/>
        </slice>
        <from usec="0" sec="1481519615"/>
        <to usec="0" sec="1481519617"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="218.53.173.231"/>
        </slice>
        <from usec="0" sec="1481519049"/>
        <to usec="0" sec="1481519051"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.36.29"/>
        </slice>
        <from usec="0" sec="1481519637"/>
        <to usec="0" sec="1481519639"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.34.192.225"/>
        </slice>
        <from usec="0" sec="1481518816"/>
        <to usec="0" sec="1481518818"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.67.61"/>
        </slice>
        <from usec="0" sec="1481519663"/>
        <to usec="0" sec="1481519665"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="165.122.213.86"/>
        </slice>
        <from usec="0" sec="1481519619"/>
        <to usec="0" sec="1481519621"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.34.194.183"/>
        </slice>
        <from usec="0" sec="1481519692"/>
        <to usec="0" sec="1481519694"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="148.228.13.79"/>
        </slice>
        <from usec="0" sec="1481519342"/>
        <to usec="0" sec="1481519344"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.65.87"/>
        </slice>
        <from usec="0" sec="1481518925"/>
        <to usec="0" sec="1481518927"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.223.35.65"/>
        </slice>
        <from usec="0" sec="1481519396"/>
        <to usec="0" sec="1481519398"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.202.41.94"/>
        </slice>
        <from usec="0" sec="1481519184"/>
        <to usec="0" sec="1481519186"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="36.112.37.49"/>
        </slice>
        <from usec="0" sec="1481519041"/>
        <to usec="0" sec="1481519043"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.202.217.47"/>
        </slice>
        <from usec="0" sec="1481519609"/>
        <to usec="0" sec="1481519611"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="124.165.128.192"/>
        </slice>
        <from usec="0" sec="1481518999"/>
        <to usec="0" sec="1481519001"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.80.207"/>
        </slice>
        <from usec="0" sec="1481519338"/>
        <to usec="0" sec="1481519340"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.95.132.76"/>
        </slice>
        <from usec="0" sec="1481519616"/>
        <to usec="0" sec="1481519643"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="219.155.135.52"/>
        </slice>
        <from usec="0" sec="1481519578"/>
        <to usec="0" sec="1481519580"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.172.17.51"/>
        </slice>
        <from usec="0" sec="1481519154"/>
        <to usec="0" sec="1481519156"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="180.143.162.199"/>
        </slice>
        <from usec="0" sec="1481519639"/>
        <to usec="0" sec="1481519641"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.202.245.56"/>
        </slice>
        <from usec="0" sec="1481519278"/>
        <to usec="0" sec="1481519280"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.34.187"/>
        </slice>
        <from usec="0" sec="1481519592"/>
        <to usec="0" sec="1481519594"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="126.105.141.58"/>
        </slice>
        <from usec="0" sec="1481519397"/>
        <to usec="0" sec="1481519399"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="117.38.246.193"/>
        </slice>
        <from usec="0" sec="1481518846"/>
        <to usec="0" sec="1481518848"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="126.36.212.196"/>
        </slice>
        <from usec="0" sec="1481519664"/>
        <to usec="0" sec="1481519666"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,502,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="220.93.23.120"/>
        </slice>
        <from usec="0" sec="1481518814"/>
        <to usec="0" sec="1481519516"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="221.25.58.206"/>
        </slice>
        <from usec="0" sec="1481519475"/>
        <to usec="0" sec="1481519477"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.35.54"/>
        </slice>
        <from usec="0" sec="1481519682"/>
        <to usec="0" sec="1481519684"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="45.239.213.57"/>
        </slice>
        <from usec="0" sec="1481519525"/>
        <to usec="0" sec="1481519527"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="126.74.60.54"/>
        </slice>
        <from usec="0" sec="1481519031"/>
        <to usec="0" sec="1481519033"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.69.0"/>
        </slice>
        <from usec="0" sec="1481519669"/>
        <to usec="0" sec="1481519671"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.91.87"/>
        </slice>
        <from usec="0" sec="1481519110"/>
        <to usec="0" sec="1481519112"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.14.171"/>
        </slice>
        <from usec="0" sec="1481518884"/>
        <to usec="0" sec="1481518886"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.91.84"/>
        </slice>
        <from usec="0" sec="1481519695"/>
        <to usec="0" sec="1481519697"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="223.121.64.170"/>
        </slice>
        <from usec="0" sec="1481519301"/>
        <to usec="0" sec="1481519303"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.84.105"/>
        </slice>
        <from usec="0" sec="1481519194"/>
        <to usec="0" sec="1481519196"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.82.175"/>
        </slice>
        <from usec="0" sec="1481518887"/>
        <to usec="0" sec="1481518890"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.36.100"/>
        </slice>
        <from usec="0" sec="1481519470"/>
        <to usec="0" sec="1481519472"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.84.103"/>
        </slice>
        <from usec="0" sec="1481519508"/>
        <to usec="0" sec="1481519510"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.84.99"/>
        </slice>
        <from usec="0" sec="1481519081"/>
        <to usec="0" sec="1481519083"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.91.104"/>
        </slice>
        <from usec="0" sec="1481518915"/>
        <to usec="0" sec="1481518917"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.202.202.233"/>
        </slice>
        <from usec="0" sec="1481519334"/>
        <to usec="0" sec="1481519337"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.223.91.106" dst_port="80"/>
            <filter src_ip="133.223.91.106" dst_port="443"/>
        </slice>
        <from usec="0" sec="1481519232"/>
        <to usec="0" sec="1481519622"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="121.106.65.17"/>
        </slice>
        <from usec="0" sec="1481519663"/>
        <to usec="0" sec="1481519665"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="126.115.201.208"/>
        </slice>
        <from usec="0" sec="1481519436"/>
        <to usec="0" sec="1481519438"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.70.152"/>
        </slice>
        <from usec="0" sec="1481519075"/>
        <to usec="0" sec="1481519077"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="126.100.14.99"/>
        </slice>
        <from usec="0" sec="1481519025"/>
        <to usec="0" sec="1481519027"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.172.105.94"/>
        </slice>
        <from usec="0" sec="1481518880"/>
        <to usec="0" sec="1481518882"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.34.227.117"/>
        </slice>
        <from usec="0" sec="1481519207"/>
        <to usec="0" sec="1481519209"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="190.195.116.168"/>
        </slice>
        <from usec="0" sec="1481518805"/>
        <to usec="0" sec="1481518807"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="1.78.139.104"/>
        </slice>
        <from usec="0" sec="1481519245"/>
        <to usec="0" sec="1481519247"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="14.30.71.50"/>
        </slice>
        <from usec="0" sec="1481518846"/>
        <to usec="0" sec="1481519319"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.235.236"/>
        </slice>
        <from usec="0" sec="1481519507"/>
        <to usec="0" sec="1481519509"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.66.141"/>
        </slice>
        <from usec="0" sec="1481518859"/>
        <to usec="0" sec="1481518866"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.206.216.215"/>
        </slice>
        <from usec="0" sec="1481518956"/>
        <to usec="0" sec="1481518958"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.223.83.13"/>
        </slice>
        <from usec="0" sec="1481519026"/>
        <to usec="0" sec="1481519028"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.34.44.151"/>
        </slice>
        <from usec="0" sec="1481518900"/>
        <to usec="0" sec="1481518903"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.223.64.117"/>
        </slice>
        <from usec="0" sec="1481519454"/>
        <to usec="0" sec="1481519456"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.95.129.113" dst_port="53"/>
            <filter src_ip="203.95.129.113" dst_port="443"/>
        </slice>
        <from usec="0" sec="1481518871"/>
        <to usec="0" sec="1481519658"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.221.248.149"/>
        </slice>
        <from usec="0" sec="1481519370"/>
        <to usec="0" sec="1481519371"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="186.173.113.172"/>
        </slice>
        <from usec="0" sec="1481519589"/>
        <to usec="0" sec="1481519592"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="49.76.50.147"/>
        </slice>
        <from usec="0" sec="1481519201"/>
        <to usec="0" sec="1481519203"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="110.59.58.237"/>
        </slice>
        <from usec="0" sec="1481519136"/>
        <to usec="0" sec="1481519137"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.223.69.55"/>
        </slice>
        <from usec="0" sec="1481519631"/>
        <to usec="0" sec="1481519633"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="211.49.249.101"/>
        </slice>
        <from usec="0" sec="1481519033"/>
        <to usec="0" sec="1481519035"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="131.98.115.166"/>
        </slice>
        <from usec="0" sec="1481519003"/>
        <to usec="0" sec="1481519006"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.235.249"/>
        </slice>
        <from usec="0" sec="1481519135"/>
        <to usec="0" sec="1481519137"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.117.0.10"/>
        </slice>
        <from usec="0" sec="1481519025"/>
        <to usec="0" sec="1481519027"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="61.182.52.8"/>
        </slice>
        <from usec="0" sec="1481519491"/>
        <to usec="0" sec="1481519493"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.95.143.5"/>
        </slice>
        <from usec="0" sec="1481518910"/>
        <to usec="0" sec="1481518912"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,010,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="115.172.106.128" dst_ip="202.244.75.7"/>
            <filter dst_ip="202.244.75.7" src_port="50128"/>
            <filter dst_ip="202.244.75.7" dst_port="23"/>
            <filter src_ip="115.172.106.128" src_port="50128" dst_port="23"/>
            <filter src_ip="115.172.106.128" src_port="50128" dst_port="2323"/>
        </slice>
        <from usec="0" sec="1481519146"/>
        <to usec="0" sec="1481519646"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.95.142.22"/>
        </slice>
        <from usec="0" sec="1481519146"/>
        <to usec="0" sec="1481519149"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="54.131.155.23"/>
        </slice>
        <from usec="0" sec="1481519476"/>
        <to usec="0" sec="1481519478"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,004,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.196.164.237"/>
        </slice>
        <from usec="0" sec="1481519365"/>
        <to usec="0" sec="1481519367"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="91.251.68.236"/>
        </slice>
        <from usec="0" sec="1481519517"/>
        <to usec="0" sec="1481519518"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.34.132.22" dst_port="80"/>
        </slice>
        <from usec="0" sec="1481519119"/>
        <to usec="0" sec="1481519632"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="111.146.180.175" dst_ip="163.34.161.224" dst_port="80"/>
        </slice>
        <from usec="0" sec="1481519473"/>
        <to usec="0" sec="1481519479"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="218.90.116.40"/>
        </slice>
        <from usec="0" sec="1481519523"/>
        <to usec="0" sec="1481519526"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,502,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="192.184.233.135" dst_ip="203.95.141.37"/>
            <filter src_ip="192.184.233.135" dst_port="161"/>
            <filter src_ip="192.184.233.135" dst_port="22"/>
            <filter dst_ip="203.95.141.37" dst_port="161"/>
            <filter dst_ip="203.95.141.37" dst_port="22"/>
            <filter src_ip="192.184.233.135"/>
        </slice>
        <from usec="0" sec="1481519487"/>
        <to usec="0" sec="1481519509"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="38.89.2.59"/>
        </slice>
        <from usec="0" sec="1481518926"/>
        <to usec="0" sec="1481518928"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,502,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.95.138.118"/>
        </slice>
        <from usec="0" sec="1481518930"/>
        <to usec="0" sec="1481518932"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.95.132.137" dst_port="80"/>
        </slice>
        <from usec="0" sec="1481518814"/>
        <to usec="0" sec="1481519043"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="184.73.244.150"/>
        </slice>
        <from usec="0" sec="1481518942"/>
        <to usec="0" sec="1481518944"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="91.251.68.169"/>
        </slice>
        <from usec="0" sec="1481519682"/>
        <to usec="0" sec="1481519684"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="91.251.68.168"/>
        </slice>
        <from usec="0" sec="1481518885"/>
        <to usec="0" sec="1481518887"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,053,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="222.232.228.88"/>
        </slice>
        <from usec="0" sec="1481519661"/>
        <to usec="0" sec="1481519663"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="184.73.196.90"/>
        </slice>
        <from usec="0" sec="1481519459"/>
        <to usec="0" sec="1481519461"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,901,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="84.32.77.126"/>
        </slice>
        <from usec="0" sec="1481519510"/>
        <to usec="0" sec="1481519512"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.95.129.15"/>
        </slice>
        <from usec="0" sec="1481519519"/>
        <to usec="0" sec="1481519521"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.223.64.87" dst_ip="52.40.146.239" dst_port="443"/>
            <filter src_ip="133.223.64.87" dst_ip="52.40.40.55" dst_port="443"/>
            <filter src_ip="133.223.66.154" dst_ip="52.40.146.239" dst_port="443"/>
        </slice>
        <from usec="0" sec="1481519025"/>
        <to usec="0" sec="1481519064"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="134.183.175.84"/>
        </slice>
        <from usec="0" sec="1481519402"/>
        <to usec="0" sec="1481519495"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.34.82.218" dst_ip="208.113.224.61" dst_port="80"/>
            <filter src_ip="163.34.82.218" dst_ip="204.177.192.133" dst_port="443"/>
        </slice>
        <from usec="0" sec="1481518843"/>
        <to usec="0" sec="1481519054"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.95.131.118"/>
        </slice>
        <from usec="0" sec="1481518922"/>
        <to usec="0" sec="1481518926"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="211.96.170.181"/>
        </slice>
        <from usec="0" sec="1481519063"/>
        <to usec="0" sec="1481519065"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="192.94.93.98"/>
        </slice>
        <from usec="0" sec="1481518817"/>
        <to usec="0" sec="1481518819"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="61.114.162.162"/>
        </slice>
        <from usec="0" sec="1481519597"/>
        <to usec="0" sec="1481519599"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="37.228.27.240"/>
        </slice>
        <from usec="0" sec="1481519445"/>
        <to usec="0" sec="1481519447"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.244.72.144" dst_port="53"/>
        </slice>
        <from usec="0" sec="1481518931"/>
        <to usec="0" sec="1481519523"/>
    </anomaly>
    <anomaly type="notice" value="0.901848,1.510300,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="13.108.137.210" dst_ip="13.108.137.210" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519061"/>
        <to usec="0" sec="1481519696"/>
    </anomaly>
    <anomaly type="notice" value="0.901848,1.510300,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.95.140.82" dst_ip="203.95.140.82" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481518832"/>
        <to usec="0" sec="1481519700"/>
    </anomaly>
    <anomaly type="notice" value="0.798065,1.457770,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="191.197.43.1" dst_port="666"/>
        </slice>
        <from usec="0" sec="1481519579"/>
        <to usec="0" sec="1481519592"/>
    </anomaly>
    <anomaly type="notice" value="0.798065,1.457770,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="192.195.191.2" dst_port="23"/>
        </slice>
        <from usec="0" sec="1481519575"/>
        <to usec="0" sec="1481519586"/>
    </anomaly>
    <anomaly type="notice" value="0.798065,1.457770,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.132.52.147" dst_port="666"/>
        </slice>
        <from usec="0" sec="1481519465"/>
        <to usec="0" sec="1481519642"/>
    </anomaly>
    <anomaly type="notice" value="0.914584,1.514000,901,0 0 1 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="13.108.137.210" dst_ip="13.108.137.210" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481519061"/>
        <to usec="0" sec="1481519696"/>
    </anomaly>
    <anomaly type="notice" value="0.914584,1.514000,901,0 0 1 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.95.140.82" dst_ip="203.95.140.82" proto="tcp"/>
        </slice>
        <from usec="0" sec="1481518832"/>
        <to usec="0" sec="1481519697"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="91.244.196.5"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,020,0 0 0 0 0 0 1 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="202.250.172.2"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="123.49.19.244"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,020,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.250.172.1"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="89.96.95.232"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="217.217.120.19"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="91.221.118.31"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="93.25.249.200"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="123.49.19.209"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="185.193.109.181"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="93.25.249.190"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="198.27.87.101"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="93.25.249.132"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="121.116.170.78"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,020,0 0 0 0 0 0 1 0 0 0 0 0,hostout">
        <slice>
            <filter src_ip="203.95.134.106"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="139.92.21.165"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="203.95.135.130"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="71.199.131.252"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="89.96.84.0"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.148.86.246"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.40.227.138" src_port="47301"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="71.199.172.126"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="118.61.158.235"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="138.68.26.148"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="94.134.46.62"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="71.199.149.38"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="71.199.149.37"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="94.134.46.33"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="203.95.135.67" dst_port="53"/>
            <filter src_ip="203.95.135.67"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="193.60.126.131"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="203.95.129.82"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.126.81.93"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,020,0 0 0 0 0 0 1 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="202.250.177.163"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.196.189.202" dst_port="50348"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="50.248.187.244" src_port="80"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="184.204.73.245" src_port="80"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.95.143.5" dst_port="53"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.223.14.11" dst_port="53"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.223.14.13" dst_port="53"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,503,0 0 0 0 0 0 1 0 0 0 0 0,ntscACKt">
        <slice>
            <filter src_ip="185.155.209.26" src_port="80"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="192.197.2.30" dst_ip="163.34.167.214" src_port="53"/>
            <filter src_ip="192.197.2.30" dst_ip="163.34.167.231" src_port="53"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="192.213.98.30" src_port="53"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="202.250.152.53" src_port="53"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.663614,1.443660,504,1 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.122.34" dst_ip="202.251.110.135" dst_port="443"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481519540"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="180.157.117.218" dst_port="23"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="184.204.57.45" src_port="80"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.95.134.59" dst_port="53"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="125.255.145.77" dst_port="445"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="192.61.125.86" src_port="80"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="199.95.129.95" src_port="80"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="192.22.81.94" src_port="80"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="121.123.16.169" dst_port="23"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="23.229.192.124" src_port="53"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="220.167.149.1" src_port="22771"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="148.228.98.252" src_port="80"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="198.244.113.48" src_port="80"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="211.226.117.46" dst_port="23"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="194.32.21.86" dst_port="445"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="180.157.117.78" dst_port="23"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="180.157.117.78" dst_port="53"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="121.86.181.80" dst_port="23"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="94.134.38.213" src_port="5122"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="94.134.38.213" src_port="6295"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="94.134.38.213" src_port="6632"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="81.132.196.248" dst_port="445"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="175.34.58.147" dst_port="23"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="162.163.58.162" src_port="80"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.663614,1.443660,999,1 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481519422"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="11390" dst_port="23"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="20744" dst_port="23"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="25475" dst_port="23"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="28919" dst_port="23"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="32727" dst_port="23"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="220.144.142.88" src_port="12539" dst_port="23"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="121.113.170.246" src_port="18391" dst_port="23"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518846"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="14.215.158.108" src_port="60000"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518891"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="159.76.40.146" dst_port="623"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518891"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="159.76.25.115" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481518891"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,504,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.34.195.157"/>
        </slice>
        <from usec="0" sec="1481519205"/>
        <to usec="0" sec="1481519251"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.95.134.59" dst_port="53"/>
        </slice>
        <from usec="0" sec="1481519205"/>
        <to usec="0" sec="1481519251"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="1.75.202.124" dst_ip="202.250.170.94"/>
            <filter src_ip="1.75.202.124" dst_port="443"/>
            <filter src_ip="49.98.108.196" dst_ip="202.250.170.94" dst_port="443"/>
            <filter src_ip="126.70.218.94" dst_ip="202.250.170.94" dst_port="443"/>
        </slice>
        <from usec="0" sec="1481519245"/>
        <to usec="0" sec="1481519685"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.223.34.93"/>
        </slice>
        <from usec="0" sec="1481519250"/>
        <to usec="0" sec="1481519296"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="14.215.158.108"/>
        </slice>
        <from usec="0" sec="1481519520"/>
        <to usec="0" sec="1481519566"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.40.227.138"/>
        </slice>
        <from usec="0" sec="1481519520"/>
        <to usec="0" sec="1481519566"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="94.134.38.213"/>
        </slice>
        <from usec="0" sec="1481519565"/>
        <to usec="0" sec="1481519611"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.34.167.231" src_port="53"/>
        </slice>
        <from usec="0" sec="1481519565"/>
        <to usec="0" sec="1481519611"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.251.129.211"/>
        </slice>
        <from usec="0" sec="1481519565"/>
        <to usec="0" sec="1481519611"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.196.189.202" dst_port="50348"/>
        </slice>
        <from usec="0" sec="1481519565"/>
        <to usec="0" sec="1481519611"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.196.189.139"/>
        </slice>
        <from usec="0" sec="1481519565"/>
        <to usec="0" sec="1481519611"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.251.243.133" dst_port="54748"/>
        </slice>
        <from usec="0" sec="1481519475"/>
        <to usec="0" sec="1481519611"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.251.243.149"/>
        </slice>
        <from usec="0" sec="1481519565"/>
        <to usec="0" sec="1481519611"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.196.190.84" dst_port="50348"/>
        </slice>
        <from usec="0" sec="1481519475"/>
        <to usec="0" sec="1481519611"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.196.190.2"/>
        </slice>
        <from usec="0" sec="1481519565"/>
        <to usec="0" sec="1481519611"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.251.242.156" dst_port="54748"/>
        </slice>
        <from usec="0" sec="1481519475"/>
        <to usec="0" sec="1481519611"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.251.242.141"/>
        </slice>
        <from usec="0" sec="1481519565"/>
        <to usec="0" sec="1481519611"/>
    </anomaly>
    <anomaly type="notice" value="0.663614,1.443660,999,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.250.134.6" dst_port="53"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481519626"/>
    </anomaly>
    <anomaly type="notice" value="0.663614,1.443660,999,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.250.183.17" dst_port="53"/>
        </slice>
        <from usec="0" sec="1481518917"/>
        <to usec="0" sec="1481519686"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.95.134.59" dst_port="53"/>
        </slice>
        <from usec="0" sec="1481519565"/>
        <to usec="0" sec="1481519611"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.95.135.174" dst_port="53"/>
        </slice>
        <from usec="0" sec="1481519565"/>
        <to usec="0" sec="1481519611"/>
    </anomaly>
    <anomaly type="notice" value="0.663614,1.443660,999,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.95.135.130" dst_port="53"/>
        </slice>
        <from usec="0" sec="1481518807"/>
        <to usec="0" sec="1481519648"/>
    </anomaly>
    <anomaly type="notice" value="0.663614,1.443660,504,1 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="157.172.53.170" dst_port="443"/>
            <filter src_ip="157.172.15.218" dst_port="443"/>
        </slice>
        <from usec="0" sec="1481518800"/>
        <to usec="0" sec="1481519693"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.95.131.118" dst_port="53"/>
        </slice>
        <from usec="0" sec="1481519565"/>
        <to usec="0" sec="1481519611"/>
    </anomaly>
    <anomaly type="notice" value="0.785370,1.496680,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.244.72.144" dst_port="53"/>
        </slice>
        <from usec="0" sec="1481519565"/>
        <to usec="0" sec="1481519611"/>
    </anomaly>
    <anomaly type="notice" value="0.663614,1.443660,999,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.244.72.154" dst_port="53"/>
        </slice>
        <from usec="0" sec="1481518824"/>
        <to usec="0" sec="1481519614"/>
    </anomaly>
    <anomaly type="notice" value="0.920565,1.466570,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="113.141.212.98"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.920565,1.466570,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.197.106.74"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.920565,1.466570,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="121.71.117.25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.920565,1.466570,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="125.2.32.242"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.920565,1.466570,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="125.141.201.1"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.819156,1.412410,503,1 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="131.98.4.144" dst_ip="140.125.110.110"/>
            <filter src_ip="131.98.4.144" dst_port="443"/>
            <filter dst_ip="140.125.110.110" dst_port="80"/>
            <filter src_ip="131.98.4.144" dst_ip="140.125.207.48" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.819156,1.412410,011,1 0 0 0 0 0 0 0 0 1 0 0,heavy_hitter">
        <slice>
            <filter src_ip="133.223.12.129" dst_ip="198.171.115.194" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.920565,1.466570,502,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.48.254"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.920565,1.466570,502,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.87.34"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.920565,1.466570,020,0 0 0 0 0 0 0 0 0 1 0 0,hostout">
        <slice>
            <filter src_ip="163.34.137.250"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.920565,1.466570,020,0 0 0 0 0 0 0 0 0 1 0 0,icmp_error">
        <slice>
            <filter src_ip="163.34.137.225"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.819156,1.412410,503,1 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="49.74.74.74" dst_ip="163.34.135.81"/>
            <filter src_ip="49.74.74.74" dst_port="80"/>
            <filter dst_ip="163.34.56.73" dst_port="80"/>
            <filter dst_ip="163.34.135.81" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.920565,1.466570,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="199.194.5.64"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.920565,1.466570,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="200.91.32.97"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.920565,1.466570,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="202.250.149.225"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.920565,1.466570,502,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="203.95.143.14" src_port="80"/>
            <filter src_ip="203.95.143.14" dst_ip="122.66.245.48" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.920565,1.466570,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="221.236.146.47"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.920565,1.466570,010,0 0 0 0 0 0 0 0 0 1 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="41.29.30.78"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.920565,1.466570,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.125.89.203"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.920565,1.466570,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="60.157.199.199"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.920565,1.466570,999,0 0 0 0 0 0 0 0 0 1 0 0,empty">
        <slice>
            <filter src_ip="61.74.211.29"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.920565,1.466570,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="77.77.0.40"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.920565,1.466570,502,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="112.170.218.92"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.920565,1.466570,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="116.87.93.40"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.819156,1.412410,504,1 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.34.193.58" src_port="80"/>
            <filter dst_ip="163.34.193.58" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.920565,1.466570,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="192.5.226.130" dst_ip="163.34.192.10" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.819156,1.412410,504,1 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.34.192.243" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.920565,1.466570,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="178.28.39.40" dst_ip="163.34.192.182" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.920565,1.466570,504,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="52.87.237.218" dst_ip="163.34.195.115" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.920565,1.466570,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="202.251.253.111" dst_ip="163.34.112.186" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.920565,1.466570,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.34.122.90" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.920565,1.466570,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.34.46.147" src_port="443"/>
            <filter dst_ip="163.34.46.147" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.920565,1.466570,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="203.137.118.19"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.920565,1.466570,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="203.95.135.245" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.920565,1.466570,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="206.122.241.113"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.135.205.114" dst_port="443"/>
        </slice>
        <from usec="0" sec="1481518835"/>
        <to usec="0" sec="1481519680"/>
    </anomaly>
    <anomaly type="notice" value="0.312792,1.414210,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.223.35.127" dst_port="80"/>
            <filter src_ip="133.223.35.127" dst_ip="176.77.178.225" dst_port="443"/>
        </slice>
        <from usec="0" sec="1481518844"/>
        <to usec="0" sec="1481519522"/>
    </anomaly>
    <anomaly type="notice" value="0.819156,1.412410,503,1 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="130.186.161.253" dst_port="443"/>
            <filter dst_ip="65.28.6.34" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
