<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.246.126.8"/>
        </slice>
        <from usec="0" sec="1483247163"/>
        <to usec="0" sec="1483247696"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,001,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.221.233.26" dst_ip="143.203.37.110" src_port="80" dst_port="9898" proto="tcp"/>
        </slice>
        <from usec="0" sec="1483247329"/>
        <to usec="0" sec="1483247633"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.221.35.220"/>
        </slice>
        <from usec="0" sec="1483247392"/>
        <to usec="0" sec="1483247673"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.231.134.209"/>
        </slice>
        <from usec="0" sec="1483247561"/>
        <to usec="0" sec="1483247563"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="49.152.200.46" dst_ip="202.243.230.117" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1483246945"/>
        <to usec="0" sec="1483246949"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="203.143.48.207"/>
        </slice>
        <from usec="0" sec="1483247478"/>
        <to usec="0" sec="1483247510"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.221.35.194" dst_ip="205.154.172.63" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1483246805"/>
        <to usec="0" sec="1483247662"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="205.154.172.63" dst_ip="163.221.35.194" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1483247096"/>
        <to usec="0" sec="1483247277"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.231.253.177" dst_ip="68.180.239.133" src_port="80" dst_port="44694" proto="tcp"/>
        </slice>
        <from usec="0" sec="1483246804"/>
        <to usec="0" sec="1483246892"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.231.179.136"/>
        </slice>
        <from usec="0" sec="1483247027"/>
        <to usec="0" sec="1483247324"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.231.96.126"/>
        </slice>
        <from usec="0" sec="1483247004"/>
        <to usec="0" sec="1483247080"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="31.50.76.107" dst_ip="163.221.34.56" src_port="443" dst_port="51021" proto="tcp"/>
        </slice>
        <from usec="0" sec="1483247308"/>
        <to usec="0" sec="1483247309"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.33.146"/>
        </slice>
        <from usec="0" sec="1483247359"/>
        <to usec="0" sec="1483247372"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.231.134.127"/>
        </slice>
        <from usec="0" sec="1483247204"/>
        <to usec="0" sec="1483247354"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="220.202.178.153"/>
        </slice>
        <from usec="0" sec="1483247207"/>
        <to usec="0" sec="1483247209"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.173.28.156"/>
        </slice>
        <from usec="0" sec="1483246997"/>
        <to usec="0" sec="1483247588"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="104.91.136.230" dst_ip="163.221.35.168" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1483247169"/>
        <to usec="0" sec="1483247221"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="104.91.136.249" dst_ip="163.221.139.30" src_port="80" dst_port="49624" proto="tcp"/>
        </slice>
        <from usec="0" sec="1483247150"/>
        <to usec="0" sec="1483247152"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="185.30.183.102"/>
        </slice>
        <from usec="0" sec="1483246918"/>
        <to usec="0" sec="1483246920"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.246.14.244" dst_ip="65.99.233.167" src_port="56014" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1483247405"/>
        <to usec="0" sec="1483247407"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="49.155.245.108" dst_ip="163.221.15.167" src_port="29188" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1483247117"/>
        <to usec="0" sec="1483247119"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.173.253.215"/>
        </slice>
        <from usec="0" sec="1483246898"/>
        <to usec="0" sec="1483247665"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.51.12"/>
        </slice>
        <from usec="0" sec="1483247022"/>
        <to usec="0" sec="1483247025"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.173.26.122" dst_ip="141.13.133.236" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1483247350"/>
        <to usec="0" sec="1483247353"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.221.55.155" dst_ip="52.186.195.214" src_port="34483" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1483246914"/>
        <to usec="0" sec="1483247694"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.246.156.217"/>
        </slice>
        <from usec="0" sec="1483247482"/>
        <to usec="0" sec="1483247484"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="68.180.236.165"/>
        </slice>
        <from usec="0" sec="1483246954"/>
        <to usec="0" sec="1483246957"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.173.28.194"/>
        </slice>
        <from usec="0" sec="1483247683"/>
        <to usec="0" sec="1483247698"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="151.106.212.193"/>
        </slice>
        <from usec="0" sec="1483246968"/>
        <to usec="0" sec="1483247659"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="70.136.23.74" dst_ip="163.221.33.133" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1483247282"/>
        <to usec="0" sec="1483247650"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="182.17.192.194" dst_ip="163.221.129.244" src_port="80" dst_port="47656" proto="tcp"/>
        </slice>
        <from usec="0" sec="1483247282"/>
        <to usec="0" sec="1483247283"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="61.209.104.53" dst_ip="163.221.247.244" src_port="51614" dst_port="1194"/>
        </slice>
        <from usec="0" sec="1483246841"/>
        <to usec="0" sec="1483247696"/>
    </anomaly>
    <anomaly type="notice" value="0.993417,2.020810,503,1 1 0 0 0 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="133.231.100.83" dst_port="80"/>
            <filter src_ip="133.231.100.83" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.221.34.239" dst_port="443"/>
            <filter src_ip="163.221.34.239" dst_ip="202.251.124.174" dst_port="80"/>
        </slice>
        <from usec="0" sec="1483247457"/>
        <to usec="0" sec="1483247671"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.221.176.61" dst_port="993"/>
        </slice>
        <from usec="0" sec="1483247239"/>
        <to usec="0" sec="1483247680"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.143.57.203" dst_port="80"/>
        </slice>
        <from usec="0" sec="1483246973"/>
        <to usec="0" sec="1483247673"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="122.77.147.102" dst_port="123"/>
            <filter dst_ip="203.143.57.175" dst_port="123"/>
            <filter dst_ip="203.143.50.123" dst_port="123"/>
            <filter dst_ip="203.143.56.18" dst_port="123"/>
        </slice>
        <from usec="0" sec="1483246800"/>
        <to usec="0" sec="1483247695"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.143.51.137" dst_ip="203.143.51.137" proto="tcp"/>
        </slice>
        <from usec="0" sec="1483246800"/>
        <to usec="0" sec="1483247700"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.243.230.123" src_port="8889" dst_port="40919"/>
        </slice>
        <from usec="0" sec="1483247520"/>
        <to usec="0" sec="1483247568"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.27.90.82"/>
        </slice>
        <from usec="0" sec="1483246957"/>
        <to usec="0" sec="1483247096"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="204.49.53.157" dst_ip="204.49.53.157" proto="tcp"/>
        </slice>
        <from usec="0" sec="1483246815"/>
        <to usec="0" sec="1483247668"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.246.56.10"/>
        </slice>
        <from usec="0" sec="1483247231"/>
        <to usec="0" sec="1483247233"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.74.163.241"/>
        </slice>
        <from usec="0" sec="1483246847"/>
        <to usec="0" sec="1483247637"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="123.14.47.245"/>
        </slice>
        <from usec="0" sec="1483246856"/>
        <to usec="0" sec="1483247678"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.173.96.124"/>
        </slice>
        <from usec="0" sec="1483247412"/>
        <to usec="0" sec="1483247612"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="112.173.213.155"/>
        </slice>
        <from usec="0" sec="1483246808"/>
        <to usec="0" sec="1483247681"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="58.142.141.151"/>
        </slice>
        <from usec="0" sec="1483247047"/>
        <to usec="0" sec="1483247049"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.250.213.133"/>
        </slice>
        <from usec="0" sec="1483247374"/>
        <to usec="0" sec="1483247690"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.231.252.113"/>
        </slice>
        <from usec="0" sec="1483247202"/>
        <to usec="0" sec="1483247436"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.231.134.94"/>
        </slice>
        <from usec="0" sec="1483247506"/>
        <to usec="0" sec="1483247670"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="60.84.212.199"/>
        </slice>
        <from usec="0" sec="1483246995"/>
        <to usec="0" sec="1483246998"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="60.251.153.248"/>
        </slice>
        <from usec="0" sec="1483246803"/>
        <to usec="0" sec="1483247632"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.221.34.222"/>
        </slice>
        <from usec="0" sec="1483247293"/>
        <to usec="0" sec="1483247583"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.221.34.195" dst_ip="103.87.144.242" dst_port="80"/>
        </slice>
        <from usec="0" sec="1483246857"/>
        <to usec="0" sec="1483247693"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.101.154.3"/>
        </slice>
        <from usec="0" sec="1483246818"/>
        <to usec="0" sec="1483246822"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.221.233.19"/>
        </slice>
        <from usec="0" sec="1483247487"/>
        <to usec="0" sec="1483247489"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="23.227.0.145"/>
        </slice>
        <from usec="0" sec="1483246990"/>
        <to usec="0" sec="1483247697"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.143.56.35" src_port="53" proto="udp"/>
        </slice>
        <from usec="0" sec="1483246925"/>
        <to usec="0" sec="1483246941"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.173.97.250" dst_port="443"/>
        </slice>
        <from usec="0" sec="1483247345"/>
        <to usec="0" sec="1483247688"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.173.70.120"/>
        </slice>
        <from usec="0" sec="1483247646"/>
        <to usec="0" sec="1483247649"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="107.152.147.181"/>
        </slice>
        <from usec="0" sec="1483247282"/>
        <to usec="0" sec="1483247284"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.246.222.69"/>
        </slice>
        <from usec="0" sec="1483246981"/>
        <to usec="0" sec="1483246984"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.143.52.76" src_port="28179"/>
        </slice>
        <from usec="0" sec="1483246849"/>
        <to usec="0" sec="1483247347"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.221.33.137"/>
        </slice>
        <from usec="0" sec="1483247368"/>
        <to usec="0" sec="1483247623"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.132.206.144" dst_port="8080" proto="tcp"/>
        </slice>
        <from usec="0" sec="1483247164"/>
        <to usec="0" sec="1483247165"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="31.50.70.17"/>
        </slice>
        <from usec="0" sec="1483247097"/>
        <to usec="0" sec="1483247099"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="80.217.25.181" src_port="3389" proto="tcp"/>
        </slice>
        <from usec="0" sec="1483247106"/>
        <to usec="0" sec="1483247107"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,011,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="113.122.182.81"/>
        </slice>
        <from usec="0" sec="1483247184"/>
        <to usec="0" sec="1483247187"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="184.106.12.82" dst_ip="203.143.60.86" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1483246827"/>
        <to usec="0" sec="1483247678"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.231.100.86" dst_ip="192.156.214.124" dst_port="80"/>
        </slice>
        <from usec="0" sec="1483246861"/>
        <to usec="0" sec="1483247695"/>
    </anomaly>
    <anomaly type="notice" value="1.088730,2.072050,504,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.246.150.2" dst_port="443"/>
            <filter src_ip="133.246.222.156" dst_port="443"/>
        </slice>
        <from usec="0" sec="1483246809"/>
        <to usec="0" sec="1483247692"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.221.108.150" dst_port="443"/>
            <filter dst_ip="17.88.65.21" dst_port="443"/>
        </slice>
        <from usec="0" sec="1483246838"/>
        <to usec="0" sec="1483247627"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.27.90.84"/>
        </slice>
        <from usec="0" sec="1483247015"/>
        <to usec="0" sec="1483247017"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,502,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="80.207.97.20" dst_port="22"/>
        </slice>
        <from usec="0" sec="1483246810"/>
        <to usec="0" sec="1483247688"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="222.149.229.226"/>
        </slice>
        <from usec="0" sec="1483247058"/>
        <to usec="0" sec="1483247061"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="27.218.133.28"/>
        </slice>
        <from usec="0" sec="1483247154"/>
        <to usec="0" sec="1483247157"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.221.33.251"/>
        </slice>
        <from usec="0" sec="1483246868"/>
        <to usec="0" sec="1483246870"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="113.237.201.228"/>
        </slice>
        <from usec="0" sec="1483246899"/>
        <to usec="0" sec="1483247553"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.246.126.0"/>
        </slice>
        <from usec="0" sec="1483247062"/>
        <to usec="0" sec="1483247665"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="223.153.156.0"/>
        </slice>
        <from usec="0" sec="1483247480"/>
        <to usec="0" sec="1483247483"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.143.59.246"/>
        </slice>
        <from usec="0" sec="1483246815"/>
        <to usec="0" sec="1483246818"/>
    </anomaly>
    <anomaly type="notice" value="0.668119,2.062920,503,1 1 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.221.233.26" dst_port="80"/>
        </slice>
        <from usec="0" sec="1483246823"/>
        <to usec="0" sec="1483247685"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.246.172.11"/>
        </slice>
        <from usec="0" sec="1483246838"/>
        <to usec="0" sec="1483246840"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.231.254.14"/>
        </slice>
        <from usec="0" sec="1483246968"/>
        <to usec="0" sec="1483247368"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.246.238.241"/>
        </slice>
        <from usec="0" sec="1483247461"/>
        <to usec="0" sec="1483247500"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.231.254.13"/>
        </slice>
        <from usec="0" sec="1483247261"/>
        <to usec="0" sec="1483247263"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.68.52.9"/>
        </slice>
        <from usec="0" sec="1483247001"/>
        <to usec="0" sec="1483247003"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.26.30"/>
        </slice>
        <from usec="0" sec="1483247285"/>
        <to usec="0" sec="1483247288"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.231.179.226"/>
        </slice>
        <from usec="0" sec="1483247602"/>
        <to usec="0" sec="1483247604"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.246.236.9"/>
        </slice>
        <from usec="0" sec="1483247425"/>
        <to usec="0" sec="1483247427"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.231.252.11"/>
        </slice>
        <from usec="0" sec="1483247378"/>
        <to usec="0" sec="1483247380"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="78.198.55.227"/>
        </slice>
        <from usec="0" sec="1483246963"/>
        <to usec="0" sec="1483246965"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="219.4.213.249"/>
        </slice>
        <from usec="0" sec="1483247403"/>
        <to usec="0" sec="1483247406"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="63.191.23.7"/>
        </slice>
        <from usec="0" sec="1483247503"/>
        <to usec="0" sec="1483247505"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.173.201.5"/>
        </slice>
        <from usec="0" sec="1483247272"/>
        <to usec="0" sec="1483247274"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.246.189.21"/>
        </slice>
        <from usec="0" sec="1483247689"/>
        <to usec="0" sec="1483247692"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.221.34.26"/>
        </slice>
        <from usec="0" sec="1483247663"/>
        <to usec="0" sec="1483247665"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="68.180.239.229"/>
        </slice>
        <from usec="0" sec="1483247413"/>
        <to usec="0" sec="1483247499"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="163.221.216.27"/>
        </slice>
        <from usec="0" sec="1483246963"/>
        <to usec="0" sec="1483246965"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="163.221.217.235"/>
        </slice>
        <from usec="0" sec="1483247277"/>
        <to usec="0" sec="1483247279"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="126.34.249.226"/>
        </slice>
        <from usec="0" sec="1483246880"/>
        <to usec="0" sec="1483246883"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.173.70.18"/>
        </slice>
        <from usec="0" sec="1483246940"/>
        <to usec="0" sec="1483247579"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.173.70.19"/>
        </slice>
        <from usec="0" sec="1483247377"/>
        <to usec="0" sec="1483247379"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="126.194.193.38"/>
        </slice>
        <from usec="0" sec="1483246888"/>
        <to usec="0" sec="1483246891"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.173.70.33"/>
        </slice>
        <from usec="0" sec="1483247000"/>
        <to usec="0" sec="1483247003"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.231.223.221"/>
        </slice>
        <from usec="0" sec="1483247022"/>
        <to usec="0" sec="1483247581"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.173.221.220"/>
        </slice>
        <from usec="0" sec="1483246918"/>
        <to usec="0" sec="1483246920"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.173.70.35"/>
        </slice>
        <from usec="0" sec="1483247388"/>
        <to usec="0" sec="1483247391"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,901,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="121.28.37.217"/>
        </slice>
        <from usec="0" sec="1483246855"/>
        <to usec="0" sec="1483246858"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.173.70.40"/>
        </slice>
        <from usec="0" sec="1483246881"/>
        <to usec="0" sec="1483247638"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="221.6.115.213"/>
        </slice>
        <from usec="0" sec="1483247255"/>
        <to usec="0" sec="1483247257"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="80.254.34.212"/>
        </slice>
        <from usec="0" sec="1483247602"/>
        <to usec="0" sec="1483247604"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.231.34.210"/>
        </slice>
        <from usec="0" sec="1483247454"/>
        <to usec="0" sec="1483247456"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.246.153.55"/>
        </slice>
        <from usec="0" sec="1483247363"/>
        <to usec="0" sec="1483247365"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.173.70.48"/>
        </slice>
        <from usec="0" sec="1483246837"/>
        <to usec="0" sec="1483246840"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.131.202"/>
        </slice>
        <from usec="0" sec="1483247573"/>
        <to usec="0" sec="1483247585"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.173.70.50"/>
        </slice>
        <from usec="0" sec="1483246810"/>
        <to usec="0" sec="1483246812"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="162.10.2.194"/>
        </slice>
        <from usec="0" sec="1483246829"/>
        <to usec="0" sec="1483246831"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.173.70.51"/>
        </slice>
        <from usec="0" sec="1483246819"/>
        <to usec="0" sec="1483246841"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.143.37.201"/>
        </slice>
        <from usec="0" sec="1483247580"/>
        <to usec="0" sec="1483247583"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.173.70.55"/>
        </slice>
        <from usec="0" sec="1483246834"/>
        <to usec="0" sec="1483247013"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,901,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="126.61.34.52"/>
        </slice>
        <from usec="0" sec="1483247590"/>
        <to usec="0" sec="1483247593"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.173.70.57"/>
        </slice>
        <from usec="0" sec="1483247522"/>
        <to usec="0" sec="1483247524"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.176.53"/>
        </slice>
        <from usec="0" sec="1483247381"/>
        <to usec="0" sec="1483247383"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.246.23.53"/>
        </slice>
        <from usec="0" sec="1483247597"/>
        <to usec="0" sec="1483247599"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.246.183.193"/>
        </slice>
        <from usec="0" sec="1483247521"/>
        <to usec="0" sec="1483247523"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.231.254.49"/>
        </slice>
        <from usec="0" sec="1483246875"/>
        <to usec="0" sec="1483246878"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="220.85.167.206"/>
        </slice>
        <from usec="0" sec="1483247532"/>
        <to usec="0" sec="1483247534"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="113.237.102.50"/>
        </slice>
        <from usec="0" sec="1483246946"/>
        <to usec="0" sec="1483246948"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.34.60"/>
        </slice>
        <from usec="0" sec="1483247207"/>
        <to usec="0" sec="1483247210"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="190.23.51.207"/>
        </slice>
        <from usec="0" sec="1483247693"/>
        <to usec="0" sec="1483247695"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.173.70.126"/>
        </slice>
        <from usec="0" sec="1483246843"/>
        <to usec="0" sec="1483246845"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="58.167.90.157"/>
        </slice>
        <from usec="0" sec="1483247203"/>
        <to usec="0" sec="1483247214"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.221.100.90"/>
        </slice>
        <from usec="0" sec="1483247417"/>
        <to usec="0" sec="1483247419"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.119.157"/>
        </slice>
        <from usec="0" sec="1483247560"/>
        <to usec="0" sec="1483247563"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.246.112.68"/>
        </slice>
        <from usec="0" sec="1483247437"/>
        <to usec="0" sec="1483247440"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="85.162.26.131"/>
        </slice>
        <from usec="0" sec="1483246918"/>
        <to usec="0" sec="1483246920"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.221.109.121"/>
        </slice>
        <from usec="0" sec="1483247398"/>
        <to usec="0" sec="1483247401"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.228.89"/>
        </slice>
        <from usec="0" sec="1483247503"/>
        <to usec="0" sec="1483247505"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="85.162.26.129"/>
        </slice>
        <from usec="0" sec="1483247036"/>
        <to usec="0" sec="1483247038"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="212.110.129.66"/>
        </slice>
        <from usec="0" sec="1483247605"/>
        <to usec="0" sec="1483247607"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.246.68.134"/>
        </slice>
        <from usec="0" sec="1483247687"/>
        <to usec="0" sec="1483247689"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.173.102.66"/>
        </slice>
        <from usec="0" sec="1483247376"/>
        <to usec="0" sec="1483247659"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.246.189.86"/>
        </slice>
        <from usec="0" sec="1483246813"/>
        <to usec="0" sec="1483246815"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="60.198.76.72"/>
        </slice>
        <from usec="0" sec="1483247098"/>
        <to usec="0" sec="1483247100"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="189.144.80.181"/>
        </slice>
        <from usec="0" sec="1483247353"/>
        <to usec="0" sec="1483247355"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="113.239.144.109"/>
        </slice>
        <from usec="0" sec="1483247386"/>
        <to usec="0" sec="1483247388"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="60.46.57.172"/>
        </slice>
        <from usec="0" sec="1483247399"/>
        <to usec="0" sec="1483247408"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.231.178.105"/>
        </slice>
        <from usec="0" sec="1483247029"/>
        <to usec="0" sec="1483247032"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.221.110.89"/>
        </slice>
        <from usec="0" sec="1483247005"/>
        <to usec="0" sec="1483247007"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.173.232.64"/>
        </slice>
        <from usec="0" sec="1483247563"/>
        <to usec="0" sec="1483247565"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.243.224.103"/>
        </slice>
        <from usec="0" sec="1483247116"/>
        <to usec="0" sec="1483247518"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="199.62.206.143"/>
        </slice>
        <from usec="0" sec="1483247175"/>
        <to usec="0" sec="1483247177"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.173.13.167"/>
        </slice>
        <from usec="0" sec="1483247396"/>
        <to usec="0" sec="1483247398"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="14.173.240.178"/>
        </slice>
        <from usec="0" sec="1483247623"/>
        <to usec="0" sec="1483247667"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.173.182.84"/>
        </slice>
        <from usec="0" sec="1483247060"/>
        <to usec="0" sec="1483247062"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="173.227.187.181"/>
        </slice>
        <from usec="0" sec="1483247456"/>
        <to usec="0" sec="1483247458"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="141.116.159.145"/>
        </slice>
        <from usec="0" sec="1483247483"/>
        <to usec="0" sec="1483247485"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.173.213.190"/>
        </slice>
        <from usec="0" sec="1483246966"/>
        <to usec="0" sec="1483247219"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.173.134.129"/>
        </slice>
        <from usec="0" sec="1483247209"/>
        <to usec="0" sec="1483247211"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="1.78.175.239" dst_ip="202.243.230.103" dst_port="993"/>
        </slice>
        <from usec="0" sec="1483246804"/>
        <to usec="0" sec="1483247637"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.173.191.158"/>
        </slice>
        <from usec="0" sec="1483247477"/>
        <to usec="0" sec="1483247479"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.221.33.154" dst_port="443"/>
            <filter src_ip="163.221.33.154" dst_port="80"/>
        </slice>
        <from usec="0" sec="1483247331"/>
        <to usec="0" sec="1483247637"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.246.15.162"/>
        </slice>
        <from usec="0" sec="1483247435"/>
        <to usec="0" sec="1483247437"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.173.185.152"/>
        </slice>
        <from usec="0" sec="1483247335"/>
        <to usec="0" sec="1483247337"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="192.201.180.94"/>
        </slice>
        <from usec="0" sec="1483247292"/>
        <to usec="0" sec="1483247662"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="49.80.91.166"/>
        </slice>
        <from usec="0" sec="1483246956"/>
        <to usec="0" sec="1483246958"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.170.214.86"/>
        </slice>
        <from usec="0" sec="1483247174"/>
        <to usec="0" sec="1483247184"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.246.94.85"/>
        </slice>
        <from usec="0" sec="1483247359"/>
        <to usec="0" sec="1483247397"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.34.84"/>
        </slice>
        <from usec="0" sec="1483246856"/>
        <to usec="0" sec="1483247415"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="146.102.65.84"/>
        </slice>
        <from usec="0" sec="1483247622"/>
        <to usec="0" sec="1483247624"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.246.167.172"/>
        </slice>
        <from usec="0" sec="1483246966"/>
        <to usec="0" sec="1483246968"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="59.31.140.77"/>
        </slice>
        <from usec="0" sec="1483246878"/>
        <to usec="0" sec="1483246942"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.231.237.76"/>
        </slice>
        <from usec="0" sec="1483247057"/>
        <to usec="0" sec="1483247678"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.246.204.119"/>
        </slice>
        <from usec="0" sec="1483246912"/>
        <to usec="0" sec="1483246914"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.173.177.136"/>
        </slice>
        <from usec="0" sec="1483247409"/>
        <to usec="0" sec="1483247411"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.246.88.121"/>
        </slice>
        <from usec="0" sec="1483247658"/>
        <to usec="0" sec="1483247660"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.221.69.70"/>
        </slice>
        <from usec="0" sec="1483247010"/>
        <to usec="0" sec="1483247013"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="115.132.128.68"/>
        </slice>
        <from usec="0" sec="1483247386"/>
        <to usec="0" sec="1483247388"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.246.242.140"/>
        </slice>
        <from usec="0" sec="1483246869"/>
        <to usec="0" sec="1483246872"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.173.252.79"/>
        </slice>
        <from usec="0" sec="1483247353"/>
        <to usec="0" sec="1483247355"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="5.93.1.112"/>
        </slice>
        <from usec="0" sec="1483247035"/>
        <to usec="0" sec="1483247037"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,502,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="149.197.196.255"/>
        </slice>
        <from usec="0" sec="1483247016"/>
        <to usec="0" sec="1483247018"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="121.182.153.0"/>
        </slice>
        <from usec="0" sec="1483247118"/>
        <to usec="0" sec="1483247120"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.173.112.127"/>
        </slice>
        <from usec="0" sec="1483247660"/>
        <to usec="0" sec="1483247662"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="118.183.231.5"/>
        </slice>
        <from usec="0" sec="1483246836"/>
        <to usec="0" sec="1483246952"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="177.73.46.133"/>
        </slice>
        <from usec="0" sec="1483247606"/>
        <to usec="0" sec="1483247608"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="173.76.228.157"/>
        </slice>
        <from usec="0" sec="1483247291"/>
        <to usec="0" sec="1483247293"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="189.216.32.123"/>
        </slice>
        <from usec="0" sec="1483247684"/>
        <to usec="0" sec="1483247686"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="123.159.141.157"/>
        </slice>
        <from usec="0" sec="1483247213"/>
        <to usec="0" sec="1483247612"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.173.59.124"/>
        </slice>
        <from usec="0" sec="1483247095"/>
        <to usec="0" sec="1483247204"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.154.60.227"/>
        </slice>
        <from usec="0" sec="1483247621"/>
        <to usec="0" sec="1483247623"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.173.154.1"/>
        </slice>
        <from usec="0" sec="1483247082"/>
        <to usec="0" sec="1483247084"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.143.49.120"/>
        </slice>
        <from usec="0" sec="1483247250"/>
        <to usec="0" sec="1483247253"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="157.173.28.159"/>
        </slice>
        <from usec="0" sec="1483247081"/>
        <to usec="0" sec="1483247479"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="187.173.245.118"/>
        </slice>
        <from usec="0" sec="1483246946"/>
        <to usec="0" sec="1483247174"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.246.200.233"/>
        </slice>
        <from usec="0" sec="1483247688"/>
        <to usec="0" sec="1483247690"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="125.42.32.111"/>
        </slice>
        <from usec="0" sec="1483247369"/>
        <to usec="0" sec="1483247372"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.98.111"/>
        </slice>
        <from usec="0" sec="1483247689"/>
        <to usec="0" sec="1483247692"/>
    </anomaly>
    <anomaly type="notice" value="0.910737,2.093270,504,1 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="172.244.150.218" dst_ip="203.143.51.133" dst_port="443"/>
            <filter src_ip="206.133.5.17" dst_ip="203.143.51.133" dst_port="443"/>
        </slice>
        <from usec="0" sec="1483246800"/>
        <to usec="0" sec="1483247674"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="5.190.74.242"/>
        </slice>
        <from usec="0" sec="1483247393"/>
        <to usec="0" sec="1483247396"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="118.2.83.110"/>
        </slice>
        <from usec="0" sec="1483246907"/>
        <to usec="0" sec="1483246909"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="203.143.39.111"/>
        </slice>
        <from usec="0" sec="1483246966"/>
        <to usec="0" sec="1483247004"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="201.180.183.108" dst_ip="210.156.3.172" dst_port="23"/>
            <filter src_ip="88.196.204.18" dst_ip="210.156.3.172" dst_port="23"/>
        </slice>
        <from usec="0" sec="1483247102"/>
        <to usec="0" sec="1483247424"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.231.239.104"/>
        </slice>
        <from usec="0" sec="1483246829"/>
        <to usec="0" sec="1483246831"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.8.248"/>
        </slice>
        <from usec="0" sec="1483247678"/>
        <to usec="0" sec="1483247680"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.173.232.150"/>
        </slice>
        <from usec="0" sec="1483247543"/>
        <to usec="0" sec="1483247545"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,901,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="221.245.199.120"/>
        </slice>
        <from usec="0" sec="1483247360"/>
        <to usec="0" sec="1483247362"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.231.134.97"/>
        </slice>
        <from usec="0" sec="1483247508"/>
        <to usec="0" sec="1483247510"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.221.35.113"/>
        </slice>
        <from usec="0" sec="1483246814"/>
        <to usec="0" sec="1483246816"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,010,1 0 0 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="117.169.92.252"/>
        </slice>
        <from usec="0" sec="1483246951"/>
        <to usec="0" sec="1483247200"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.221.34.152" dst_ip="202.251.124.245" dst_port="80"/>
        </slice>
        <from usec="0" sec="1483247066"/>
        <to usec="0" sec="1483247661"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="91.200.35.37"/>
        </slice>
        <from usec="0" sec="1483247023"/>
        <to usec="0" sec="1483247025"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.246.36.214"/>
        </slice>
        <from usec="0" sec="1483246964"/>
        <to usec="0" sec="1483246967"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.231.14.215"/>
        </slice>
        <from usec="0" sec="1483247116"/>
        <to usec="0" sec="1483247118"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="220.106.99.85"/>
        </slice>
        <from usec="0" sec="1483247552"/>
        <to usec="0" sec="1483247554"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="73.250.88.208"/>
        </slice>
        <from usec="0" sec="1483246964"/>
        <to usec="0" sec="1483247636"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.221.35.81"/>
        </slice>
        <from usec="0" sec="1483247361"/>
        <to usec="0" sec="1483247363"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,901,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.221.34.172"/>
        </slice>
        <from usec="0" sec="1483247017"/>
        <to usec="0" sec="1483247020"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.221.129.54" dst_ip="219.143.191.37" dst_port="80"/>
        </slice>
        <from usec="0" sec="1483246944"/>
        <to usec="0" sec="1483246962"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="220.222.123.79"/>
        </slice>
        <from usec="0" sec="1483247227"/>
        <to usec="0" sec="1483247229"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.231.80.185"/>
        </slice>
        <from usec="0" sec="1483246802"/>
        <to usec="0" sec="1483246805"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.221.102.182"/>
        </slice>
        <from usec="0" sec="1483247236"/>
        <to usec="0" sec="1483247573"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.173.255.79"/>
        </slice>
        <from usec="0" sec="1483246807"/>
        <to usec="0" sec="1483246810"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.62.179"/>
        </slice>
        <from usec="0" sec="1483247036"/>
        <to usec="0" sec="1483247038"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="133.3.190.54"/>
        </slice>
        <from usec="0" sec="1483247539"/>
        <to usec="0" sec="1483247541"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.74.49.63"/>
        </slice>
        <from usec="0" sec="1483246844"/>
        <to usec="0" sec="1483247115"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.173.21.225"/>
        </slice>
        <from usec="0" sec="1483247242"/>
        <to usec="0" sec="1483247244"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="87.34.156.224"/>
        </slice>
        <from usec="0" sec="1483247579"/>
        <to usec="0" sec="1483247581"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.246.167.38"/>
        </slice>
        <from usec="0" sec="1483246918"/>
        <to usec="0" sec="1483246920"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="192.252.62.188"/>
        </slice>
        <from usec="0" sec="1483246991"/>
        <to usec="0" sec="1483246993"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.246.79.124"/>
        </slice>
        <from usec="0" sec="1483247469"/>
        <to usec="0" sec="1483247471"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,020,1 0 0 0 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="203.143.57.27"/>
        </slice>
        <from usec="0" sec="1483247663"/>
        <to usec="0" sec="1483247665"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="201.158.223.74"/>
        </slice>
        <from usec="0" sec="1483247339"/>
        <to usec="0" sec="1483247347"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.246.112.213"/>
        </slice>
        <from usec="0" sec="1483247542"/>
        <to usec="0" sec="1483247544"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="198.137.119.174"/>
        </slice>
        <from usec="0" sec="1483246837"/>
        <to usec="0" sec="1483246840"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="119.148.227.110"/>
        </slice>
        <from usec="0" sec="1483247328"/>
        <to usec="0" sec="1483247373"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,901,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="131.246.252.130"/>
        </slice>
        <from usec="0" sec="1483247226"/>
        <to usec="0" sec="1483247228"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="52.219.87.36"/>
        </slice>
        <from usec="0" sec="1483247616"/>
        <to usec="0" sec="1483247618"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,901,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="126.69.125.86"/>
        </slice>
        <from usec="0" sec="1483247070"/>
        <to usec="0" sec="1483247073"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="121.95.2.166"/>
        </slice>
        <from usec="0" sec="1483247684"/>
        <to usec="0" sec="1483247686"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="220.77.49.134"/>
        </slice>
        <from usec="0" sec="1483247666"/>
        <to usec="0" sec="1483247676"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.221.35.5"/>
        </slice>
        <from usec="0" sec="1483247267"/>
        <to usec="0" sec="1483247270"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.164.255"/>
        </slice>
        <from usec="0" sec="1483246931"/>
        <to usec="0" sec="1483246933"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="175.132.58.190"/>
        </slice>
        <from usec="0" sec="1483247484"/>
        <to usec="0" sec="1483247486"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.157.83.95"/>
        </slice>
        <from usec="0" sec="1483247509"/>
        <to usec="0" sec="1483247512"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.231.135.88"/>
        </slice>
        <from usec="0" sec="1483246977"/>
        <to usec="0" sec="1483247541"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.180.160"/>
        </slice>
        <from usec="0" sec="1483246950"/>
        <to usec="0" sec="1483246965"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.221.30.230"/>
        </slice>
        <from usec="0" sec="1483247103"/>
        <to usec="0" sec="1483247105"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.76.226"/>
        </slice>
        <from usec="0" sec="1483247169"/>
        <to usec="0" sec="1483247171"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="216.236.65.23"/>
        </slice>
        <from usec="0" sec="1483247157"/>
        <to usec="0" sec="1483247160"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.30.232"/>
        </slice>
        <from usec="0" sec="1483247001"/>
        <to usec="0" sec="1483247003"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,901,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="5.194.184.149"/>
        </slice>
        <from usec="0" sec="1483247030"/>
        <to usec="0" sec="1483247032"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.143.55.106"/>
        </slice>
        <from usec="0" sec="1483247527"/>
        <to usec="0" sec="1483247529"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="14.181.168.174"/>
        </slice>
        <from usec="0" sec="1483246878"/>
        <to usec="0" sec="1483247488"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="114.203.97.82"/>
        </slice>
        <from usec="0" sec="1483247537"/>
        <to usec="0" sec="1483247539"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.173.28.193"/>
        </slice>
        <from usec="0" sec="1483247663"/>
        <to usec="0" sec="1483247665"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.173.28.192"/>
        </slice>
        <from usec="0" sec="1483247542"/>
        <to usec="0" sec="1483247544"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.243.224.202"/>
        </slice>
        <from usec="0" sec="1483247683"/>
        <to usec="0" sec="1483247685"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.173.28.195"/>
        </slice>
        <from usec="0" sec="1483247425"/>
        <to usec="0" sec="1483247427"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.173.28.199"/>
        </slice>
        <from usec="0" sec="1483247017"/>
        <to usec="0" sec="1483247020"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.231.101.128"/>
        </slice>
        <from usec="0" sec="1483247583"/>
        <to usec="0" sec="1483247585"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="83.167.18.177"/>
        </slice>
        <from usec="0" sec="1483247109"/>
        <to usec="0" sec="1483247111"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.115.15"/>
        </slice>
        <from usec="0" sec="1483246997"/>
        <to usec="0" sec="1483247178"/>
    </anomaly>
    <anomaly type="notice" value="0.794348,2.042560,502,1 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="116.30.139.246" dst_ip="133.68.56.24"/>
            <filter dst_ip="133.68.56.24" dst_port="22"/>
            <filter src_ip="116.30.139.246" dst_ip="133.68.51.228" dst_port="22"/>
            <filter src_ip="116.30.139.246" dst_ip="133.68.60.7" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.668119,2.062920,504,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.221.139.30" dst_port="443"/>
            <filter src_ip="163.221.139.30" dst_port="80"/>
        </slice>
        <from usec="0" sec="1483246804"/>
        <to usec="0" sec="1483247697"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.115.148.18"/>
        </slice>
        <from usec="0" sec="1483247186"/>
        <to usec="0" sec="1483247188"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.143.48.236"/>
        </slice>
        <from usec="0" sec="1483247683"/>
        <to usec="0" sec="1483247685"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="91.227.33.233"/>
        </slice>
        <from usec="0" sec="1483247655"/>
        <to usec="0" sec="1483247657"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.221.233.25"/>
        </slice>
        <from usec="0" sec="1483247468"/>
        <to usec="0" sec="1483247470"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,054,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="17.101.245.240"/>
        </slice>
        <from usec="0" sec="1483247597"/>
        <to usec="0" sec="1483247599"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.221.110.62" dst_port="80"/>
            <filter src_ip="163.221.110.62" dst_port="443"/>
        </slice>
        <from usec="0" sec="1483246873"/>
        <to usec="0" sec="1483247632"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.143.63.210"/>
        </slice>
        <from usec="0" sec="1483247583"/>
        <to usec="0" sec="1483247645"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="180.241.243.246" dst_ip="203.143.56.54" dst_port="25"/>
        </slice>
        <from usec="0" sec="1483247075"/>
        <to usec="0" sec="1483247115"/>
    </anomaly>
    <anomaly type="notice" value="0.910737,2.093270,504,1 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.231.252.224" src_port="25"/>
            <filter src_ip="133.231.252.224" dst_ip="198.83.176.193" dst_port="443"/>
        </slice>
        <from usec="0" sec="1483247023"/>
        <to usec="0" sec="1483247644"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.143.48.166" dst_ip="85.40.202.195" dst_port="443"/>
        </slice>
        <from usec="0" sec="1483247058"/>
        <to usec="0" sec="1483247692"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.143.48.153"/>
        </slice>
        <from usec="0" sec="1483247642"/>
        <to usec="0" sec="1483247644"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.143.51.158"/>
        </slice>
        <from usec="0" sec="1483246848"/>
        <to usec="0" sec="1483246851"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="66.240.12.93"/>
        </slice>
        <from usec="0" sec="1483247221"/>
        <to usec="0" sec="1483247223"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,053,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.143.58.170"/>
        </slice>
        <from usec="0" sec="1483247085"/>
        <to usec="0" sec="1483247088"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.243.224.103"/>
        </slice>
        <from usec="0" sec="1483247060"/>
        <to usec="0" sec="1483247062"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="131.29.194.117"/>
        </slice>
        <from usec="0" sec="1483247416"/>
        <to usec="0" sec="1483247418"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="91.227.32.166"/>
        </slice>
        <from usec="0" sec="1483247103"/>
        <to usec="0" sec="1483247105"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="91.227.32.167"/>
        </slice>
        <from usec="0" sec="1483247070"/>
        <to usec="0" sec="1483247073"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="202.250.244.127"/>
        </slice>
        <from usec="0" sec="1483247435"/>
        <to usec="0" sec="1483247437"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.221.1.185" dst_ip="132.18.142.53" dst_port="443"/>
        </slice>
        <from usec="0" sec="1483246839"/>
        <to usec="0" sec="1483247603"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,010,1 0 0 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="150.107.246.92"/>
        </slice>
        <from usec="0" sec="1483247412"/>
        <to usec="0" sec="1483247415"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="186.114.9.212" dst_ip="210.156.3.167" dst_port="23"/>
            <filter src_ip="221.111.236.3" dst_ip="210.156.3.167" dst_port="23"/>
            <filter src_ip="211.51.195.110" dst_ip="210.156.3.167" dst_port="23"/>
        </slice>
        <from usec="0" sec="1483246890"/>
        <to usec="0" sec="1483247664"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.143.51.172"/>
        </slice>
        <from usec="0" sec="1483247579"/>
        <to usec="0" sec="1483247581"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.143.63.135"/>
        </slice>
        <from usec="0" sec="1483247628"/>
        <to usec="0" sec="1483247631"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="54.16.63.24"/>
        </slice>
        <from usec="0" sec="1483247605"/>
        <to usec="0" sec="1483247607"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,901,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="64.67.200.132"/>
        </slice>
        <from usec="0" sec="1483247497"/>
        <to usec="0" sec="1483247499"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="210.156.3.18"/>
        </slice>
        <from usec="0" sec="1483246818"/>
        <to usec="0" sec="1483246820"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,901,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.67.220.143"/>
        </slice>
        <from usec="0" sec="1483247621"/>
        <to usec="0" sec="1483247623"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.27.90.115"/>
        </slice>
        <from usec="0" sec="1483247632"/>
        <to usec="0" sec="1483247635"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.27.90.104"/>
        </slice>
        <from usec="0" sec="1483247552"/>
        <to usec="0" sec="1483247555"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.27.90.107"/>
        </slice>
        <from usec="0" sec="1483247516"/>
        <to usec="0" sec="1483247518"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,901,1 0 0 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="163.221.96.24"/>
        </slice>
        <from usec="0" sec="1483247661"/>
        <to usec="0" sec="1483247664"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,502,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="218.189.31.230" dst_ip="210.156.0.34"/>
            <filter src_ip="218.189.31.230" dst_ip="210.156.0.4"/>
            <filter src_ip="218.189.31.230" dst_port="22"/>
            <filter src_ip="218.168.98.8" dst_ip="210.156.0.34"/>
            <filter src_ip="218.168.98.8" dst_ip="210.156.0.4"/>
            <filter src_ip="218.168.98.8" dst_port="22"/>
            <filter dst_ip="210.156.0.34" dst_port="22"/>
            <filter dst_ip="210.156.0.4" dst_port="22"/>
        </slice>
        <from usec="0" sec="1483246939"/>
        <to usec="0" sec="1483247680"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.34.254.195"/>
        </slice>
        <from usec="0" sec="1483247402"/>
        <to usec="0" sec="1483247404"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,2.124270,020,1 0 0 1 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="203.143.57.27"/>
        </slice>
        <from usec="0" sec="1483246823"/>
        <to usec="0" sec="1483247296"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.246.88.61" dst_ip="17.27.90.41"/>
            <filter dst_ip="17.27.90.41" dst_port="443"/>
            <filter src_ip="133.246.88.61" dst_ip="17.27.90.115" dst_port="443"/>
            <filter src_ip="133.246.88.61" dst_ip="17.27.90.45" dst_port="443"/>
        </slice>
        <from usec="0" sec="1483247193"/>
        <to usec="0" sec="1483247440"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.27.90.43"/>
        </slice>
        <from usec="0" sec="1483246825"/>
        <to usec="0" sec="1483246827"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.27.90.45"/>
        </slice>
        <from usec="0" sec="1483247426"/>
        <to usec="0" sec="1483247428"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.111.73.50"/>
        </slice>
        <from usec="0" sec="1483246937"/>
        <to usec="0" sec="1483246939"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.27.90.1"/>
        </slice>
        <from usec="0" sec="1483246847"/>
        <to usec="0" sec="1483246849"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.27.90.5"/>
        </slice>
        <from usec="0" sec="1483247669"/>
        <to usec="0" sec="1483247671"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="41.39.43.117"/>
        </slice>
        <from usec="0" sec="1483247648"/>
        <to usec="0" sec="1483247650"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,010,1 0 0 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="202.250.209.67"/>
        </slice>
        <from usec="0" sec="1483247111"/>
        <to usec="0" sec="1483247114"/>
    </anomaly>
    <anomaly type="notice" value="0.668119,2.062920,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="221.227.181.225" dst_ip="163.221.236.37" dst_port="443"/>
        </slice>
        <from usec="0" sec="1483247304"/>
        <to usec="0" sec="1483247356"/>
    </anomaly>
    <anomaly type="notice" value="1.019160,2.094380,010,1 1 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="45.192.122.1" dst_port="443"/>
        </slice>
        <from usec="0" sec="1483247222"/>
        <to usec="0" sec="1483247700"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,999,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.246.20.11" dst_ip="17.74.226.14" src_port="33937" dst_port="25"/>
        </slice>
        <from usec="0" sec="1483247457"/>
        <to usec="0" sec="1483247461"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.221.129.244" dst_ip="107.143.103.135" dst_port="80"/>
        </slice>
        <from usec="0" sec="1483247239"/>
        <to usec="0" sec="1483247377"/>
    </anomaly>
    <anomaly type="notice" value="0.668119,2.062920,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.166.180.218" dst_ip="163.221.233.19" src_port="57656" dst_port="80"/>
            <filter src_ip="210.166.180.218" dst_ip="163.221.233.19" src_port="57580" dst_port="80"/>
            <filter src_ip="210.166.180.218" dst_ip="163.221.233.19" src_port="57431" dst_port="80"/>
        </slice>
        <from usec="0" sec="1483246830"/>
        <to usec="0" sec="1483247132"/>
    </anomaly>
    <anomaly type="notice" value="0.668119,2.062920,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="126.143.10.200" dst_ip="202.243.230.98" dst_port="80"/>
        </slice>
        <from usec="0" sec="1483247629"/>
        <to usec="0" sec="1483247688"/>
    </anomaly>
    <anomaly type="notice" value="0.668119,2.062920,999,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="68.248.218.176" dst_ip="203.143.62.157" src_port="51106" dst_port="25"/>
        </slice>
        <from usec="0" sec="1483247143"/>
        <to usec="0" sec="1483247146"/>
    </anomaly>
    <anomaly type="notice" value="1.224900,2.020950,504,1 1 1 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="163.221.55.108" dst_ip="67.60.246.89" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.245870,2.094510,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="192.252.100.103" src_port="5128" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1483247292"/>
        <to usec="0" sec="1483247341"/>
    </anomaly>
    <anomaly type="notice" value="0.668119,2.062920,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.221.33.150" dst_port="80"/>
            <filter src_ip="163.221.33.150" dst_ip="91.206.145.5" dst_port="443"/>
        </slice>
        <from usec="0" sec="1483246818"/>
        <to usec="0" sec="1483247676"/>
    </anomaly>
    <anomaly type="notice" value="0.668119,2.062920,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="221.160.75.120" dst_ip="203.143.44.69" src_port="54291" dst_port="80"/>
        </slice>
        <from usec="0" sec="1483246805"/>
        <to usec="0" sec="1483246807"/>
    </anomaly>
    <anomaly type="notice" value="0.908978,2.151130,010,0 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="27.64.19.101" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1483247088"/>
        <to usec="0" sec="1483247285"/>
    </anomaly>
    <anomaly type="notice" value="0.668119,2.062920,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="68.180.239.21" dst_ip="203.143.59.80" src_port="36790" dst_port="80"/>
        </slice>
        <from usec="0" sec="1483247184"/>
        <to usec="0" sec="1483247186"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,999,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.173.20.155" dst_ip="17.74.226.9" src_port="20460" dst_port="25"/>
        </slice>
        <from usec="0" sec="1483246870"/>
        <to usec="0" sec="1483246873"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="49.152.173.130" dst_ip="202.250.244.127" dst_port="80"/>
        </slice>
        <from usec="0" sec="1483247337"/>
        <to usec="0" sec="1483247340"/>
    </anomaly>
    <anomaly type="notice" value="0.668119,2.062920,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="193.191.222.152" dst_ip="203.143.53.37" dst_port="161"/>
            <filter src_ip="193.191.222.152" dst_ip="203.143.53.38" dst_port="161"/>
            <filter src_ip="193.191.222.152" dst_ip="203.143.53.35" dst_port="161"/>
        </slice>
        <from usec="0" sec="1483246821"/>
        <to usec="0" sec="1483247109"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,999,1 1 1 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="118.14.240.82" dst_ip="203.143.53.116" src_port="500" dst_port="500"/>
            <filter src_ip="118.14.240.82" dst_ip="203.143.53.116"/>
        </slice>
        <from usec="0" sec="1483246802"/>
        <to usec="0" sec="1483247409"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.47.4.176" dst_port="4028"/>
        </slice>
        <from usec="0" sec="1483247024"/>
        <to usec="0" sec="1483247143"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,999,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.175.117.250" dst_ip="202.250.244.71" src_port="60343" dst_port="25"/>
        </slice>
        <from usec="0" sec="1483247421"/>
        <to usec="0" sec="1483247423"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,999,1 1 1 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.221.176.86" dst_port="25"/>
        </slice>
        <from usec="0" sec="1483246879"/>
        <to usec="0" sec="1483247275"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.215.60.190" src_port="49471" dst_port="53"/>
        </slice>
        <from usec="0" sec="1483247649"/>
        <to usec="0" sec="1483247657"/>
    </anomaly>
    <anomaly type="notice" value="0.668119,2.062920,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.152.170.12" dst_ip="202.243.230.98" dst_port="80"/>
        </slice>
        <from usec="0" sec="1483247121"/>
        <to usec="0" sec="1483247123"/>
    </anomaly>
    <anomaly type="notice" value="1.245870,2.094510,020,1 1 1 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="207.22.253.213"/>
        </slice>
        <from usec="0" sec="1483247248"/>
        <to usec="0" sec="1483247409"/>
    </anomaly>
    <anomaly type="notice" value="1.019160,2.094380,999,1 1 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.250.225.250" dst_port="53"/>
        </slice>
        <from usec="0" sec="1483247115"/>
        <to usec="0" sec="1483247693"/>
    </anomaly>
    <anomaly type="notice" value="0.668119,2.062920,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.143.56.38" dst_port="53"/>
        </slice>
        <from usec="0" sec="1483247243"/>
        <to usec="0" sec="1483247245"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.160.153.210" src_port="3088" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1483247615"/>
        <to usec="0" sec="1483247617"/>
    </anomaly>
    <anomaly type="notice" value="1.245870,2.094510,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.63.85.98" src_port="3371" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1483247565"/>
        <to usec="0" sec="1483247651"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.143.48.236" dst_ip="103.64.246.236" src_port="25" dst_port="62432"/>
            <filter src_ip="203.143.48.236" dst_ip="103.64.246.236" src_port="25" dst_port="59850"/>
            <filter src_ip="203.143.48.236" dst_ip="52.194.231.0" src_port="993" dst_port="24336"/>
            <filter src_ip="203.143.48.236" dst_ip="216.81.15.210" src_port="62405" dst_port="25"/>
            <filter src_ip="203.143.48.236" dst_ip="216.81.5.38" src_port="62404" dst_port="25"/>
        </slice>
        <from usec="0" sec="1483247161"/>
        <to usec="0" sec="1483247164"/>
    </anomaly>
    <anomaly type="notice" value="1.019160,2.094380,999,1 1 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="49.112.122.19" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1483247295"/>
        <to usec="0" sec="1483247341"/>
    </anomaly>
    <anomaly type="notice" value="1.245870,2.094510,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="204.131.55.147" dst_port="23"/>
        </slice>
        <from usec="0" sec="1483246935"/>
        <to usec="0" sec="1483246981"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,999,1 1 1 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="157.173.235.179" dst_ip="203.146.36.6" dst_port="53"/>
        </slice>
        <from usec="0" sec="1483246860"/>
        <to usec="0" sec="1483246862"/>
    </anomaly>
    <anomaly type="notice" value="0.668119,2.062920,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="60.174.194.154" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1483247547"/>
        <to usec="0" sec="1483247671"/>
    </anomaly>
    <anomaly type="notice" value="0.668119,2.062920,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.64.141.27" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1483247179"/>
        <to usec="0" sec="1483247364"/>
    </anomaly>
    <anomaly type="notice" value="0.668119,2.062920,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="124.121.42.161" dst_port="23"/>
        </slice>
        <from usec="0" sec="1483246805"/>
        <to usec="0" sec="1483246807"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="46.201.114.209" src_port="1024" dst_port="23"/>
        </slice>
        <from usec="0" sec="1483246841"/>
        <to usec="0" sec="1483247635"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="179.221.129.118"/>
        </slice>
        <from usec="0" sec="1483247068"/>
        <to usec="0" sec="1483247069"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,011,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="183.67.203.231" src_port="1433"/>
        </slice>
        <from usec="0" sec="1483247601"/>
        <to usec="0" sec="1483247602"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,011,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="27.64.19.101" src_port="1433"/>
        </slice>
        <from usec="0" sec="1483247096"/>
        <to usec="0" sec="1483247099"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,011,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="201.47.4.176" src_port="4028"/>
        </slice>
        <from usec="0" sec="1483247075"/>
        <to usec="0" sec="1483247077"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.143.48.226" dst_port="53"/>
        </slice>
        <from usec="0" sec="1483247040"/>
        <to usec="0" sec="1483247577"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,010,1 1 1 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="150.255.166.166" src_port="43160" dst_port="23"/>
            <filter src_ip="150.255.166.166" src_port="43160" dst_port="2323"/>
        </slice>
        <from usec="0" sec="1483246959"/>
        <to usec="0" sec="1483247569"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.162.42.3" dst_port="23"/>
        </slice>
        <from usec="0" sec="1483247683"/>
        <to usec="0" sec="1483247694"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,010,1 1 1 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="175.142.197.245" dst_ip="163.221.162.11" src_port="23191" dst_port="2323"/>
            <filter src_ip="175.142.197.245" dst_ip="163.221.162.11" src_port="23191" dst_port="23"/>
        </slice>
        <from usec="0" sec="1483247660"/>
        <to usec="0" sec="1483247662"/>
    </anomaly>
    <anomaly type="notice" value="0.668119,2.062920,010,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="223.153.208.236" src_port="16627" dst_port="23"/>
            <filter src_ip="223.153.208.236" src_port="16627" dst_port="2323"/>
        </slice>
        <from usec="0" sec="1483246864"/>
        <to usec="0" sec="1483247127"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,999,1 1 1 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="202.26.221.4" dst_ip="163.221.176.12" dst_port="53"/>
        </slice>
        <from usec="0" sec="1483247448"/>
        <to usec="0" sec="1483247450"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="130.74.163.236" dst_port="25"/>
        </slice>
        <from usec="0" sec="1483247030"/>
        <to usec="0" sec="1483247680"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.30.40.35" dst_port="23"/>
        </slice>
        <from usec="0" sec="1483246925"/>
        <to usec="0" sec="1483246953"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="111.83.162.97" dst_ip="203.143.56.54" src_port="4666" dst_port="25"/>
        </slice>
        <from usec="0" sec="1483247509"/>
        <to usec="0" sec="1483247519"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="62.12.207.159" dst_ip="203.143.57.175" src_port="56101" dst_port="123"/>
            <filter src_ip="62.12.207.159" dst_ip="203.143.56.18" src_port="56101" dst_port="123"/>
        </slice>
        <from usec="0" sec="1483246805"/>
        <to usec="0" sec="1483247102"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.243.230.123" src_port="25"/>
            <filter src_ip="202.243.230.123" dst_port="25"/>
            <filter src_ip="202.243.230.123" src_port="40919" dst_port="8889"/>
        </slice>
        <from usec="0" sec="1483247250"/>
        <to usec="0" sec="1483247640"/>
    </anomaly>
    <anomaly type="notice" value="0.777175,2.084380,010,1 0 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="27.64.19.101" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1483247088"/>
        <to usec="0" sec="1483247285"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,502,1 1 1 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="193.191.222.153" dst_ip="203.143.53.37" src_port="36226" dst_port="22"/>
            <filter src_ip="193.191.222.153" dst_ip="203.143.53.36" src_port="58336" dst_port="22"/>
            <filter src_ip="193.191.222.153" dst_ip="203.143.53.35" src_port="33387" dst_port="22"/>
        </slice>
        <from usec="0" sec="1483247002"/>
        <to usec="0" sec="1483247534"/>
    </anomaly>
    <anomaly type="notice" value="1.245870,2.094510,999,1 1 1 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="61.248.129.12" dst_ip="202.67.220.132" dst_port="53"/>
            <filter src_ip="61.248.129.17" dst_ip="202.67.220.132" dst_port="53"/>
        </slice>
        <from usec="0" sec="1483246802"/>
        <to usec="0" sec="1483247464"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.143.62.133" dst_port="53"/>
        </slice>
        <from usec="0" sec="1483246804"/>
        <to usec="0" sec="1483247509"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="198.87.53.110" dst_port="23"/>
        </slice>
        <from usec="0" sec="1483247365"/>
        <to usec="0" sec="1483247378"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.143.53.127" dst_port="53"/>
        </slice>
        <from usec="0" sec="1483247359"/>
        <to usec="0" sec="1483247689"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="104.192.214.212"/>
        </slice>
        <from usec="0" sec="1483247117"/>
        <to usec="0" sec="1483247119"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.231.131.228" dst_port="53"/>
            <filter src_ip="133.231.131.228" dst_port="2703"/>
        </slice>
        <from usec="0" sec="1483246986"/>
        <to usec="0" sec="1483247014"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.187.4.90" dst_port="8180"/>
        </slice>
        <from usec="0" sec="1483247401"/>
        <to usec="0" sec="1483247403"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.122.182.81" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1483247179"/>
        <to usec="0" sec="1483247364"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.241.90.220" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1483247179"/>
        <to usec="0" sec="1483247364"/>
    </anomaly>
    <anomaly type="notice" value="1.245870,2.094510,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.233.232.111" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1483247404"/>
        <to usec="0" sec="1483247476"/>
    </anomaly>
    <anomaly type="notice" value="1.245870,2.094510,011,1 1 1 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="222.182.139.138" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1483246800"/>
        <to usec="0" sec="1483246846"/>
    </anomaly>
    <anomaly type="notice" value="0.979739,2.063060,999,1 1 1 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="133.68.57.225" dst_ip="89.124.72.149" dst_port="53"/>
        </slice>
        <from usec="0" sec="1483246869"/>
        <to usec="0" sec="1483246872"/>
    </anomaly>
    <anomaly type="notice" value="1.245870,2.094510,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.143.62.237" dst_port="53"/>
        </slice>
        <from usec="0" sec="1483247115"/>
        <to usec="0" sec="1483247593"/>
    </anomaly>
    <anomaly type="notice" value="1.245870,2.094510,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.243.225.198" dst_port="53"/>
        </slice>
        <from usec="0" sec="1483247115"/>
        <to usec="0" sec="1483247689"/>
    </anomaly>
    <anomaly type="notice" value="1.099680,2.180250,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv46tun">
        <slice>
            <filter src_ip="203.143.56.30"/>
        </slice>
        <from usec="0" sec="1483246800"/>
        <to usec="0" sec="1483246908"/>
    </anomaly>
    <anomaly type="notice" value="1.099680,2.180250,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.143.62.154"/>
        </slice>
        <from usec="0" sec="1483246800"/>
        <to usec="0" sec="1483246908"/>
    </anomaly>
    <anomaly type="notice" value="1.099680,2.180250,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="187.172.140.101"/>
        </slice>
        <from usec="0" sec="1483246803"/>
        <to usec="0" sec="1483246907"/>
    </anomaly>
    <anomaly type="notice" value="1.099680,2.180250,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="211.38.166.71"/>
        </slice>
        <from usec="0" sec="1483246800"/>
        <to usec="0" sec="1483246998"/>
    </anomaly>
    <anomaly type="notice" value="1.099680,2.180250,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.231.236.47"/>
        </slice>
        <from usec="0" sec="1483246800"/>
        <to usec="0" sec="1483246998"/>
    </anomaly>
    <anomaly type="notice" value="1.099680,2.180250,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.80.230.6"/>
        </slice>
        <from usec="0" sec="1483246800"/>
        <to usec="0" sec="1483246997"/>
    </anomaly>
    <anomaly type="notice" value="1.099680,2.180250,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="100.241.140.83"/>
        </slice>
        <from usec="0" sec="1483246802"/>
        <to usec="0" sec="1483247358"/>
    </anomaly>
    <anomaly type="notice" value="1.099680,2.180250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="113.167.155.223"/>
        </slice>
        <from usec="0" sec="1483246803"/>
        <to usec="0" sec="1483246998"/>
    </anomaly>
    <anomaly type="notice" value="1.099680,2.180250,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="93.159.7.242"/>
        </slice>
        <from usec="0" sec="1483246803"/>
        <to usec="0" sec="1483246932"/>
    </anomaly>
    <anomaly type="notice" value="0.910737,2.093270,502,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="203.143.61.215" dst_ip="80.207.97.20"/>
            <filter src_ip="203.143.61.215" src_port="22"/>
            <filter dst_ip="80.207.97.20" src_port="22"/>
        </slice>
        <from usec="0" sec="1483246804"/>
        <to usec="0" sec="1483246998"/>
    </anomaly>
    <anomaly type="notice" value="1.099680,2.180250,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="185.76.203.221"/>
        </slice>
        <from usec="0" sec="1483246807"/>
        <to usec="0" sec="1483246969"/>
    </anomaly>
    <anomaly type="notice" value="0.910737,2.093270,504,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.246.94.130" dst_ip="17.27.90.87" dst_port="443"/>
        </slice>
        <from usec="0" sec="1483246825"/>
        <to usec="0" sec="1483246998"/>
    </anomaly>
    <anomaly type="notice" value="1.099680,2.180250,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="17.74.244.212"/>
        </slice>
        <from usec="0" sec="1483246838"/>
        <to usec="0" sec="1483246948"/>
    </anomaly>
    <anomaly type="notice" value="1.099680,2.180250,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.246.178.52"/>
        </slice>
        <from usec="0" sec="1483246838"/>
        <to usec="0" sec="1483246852"/>
    </anomaly>
    <anomaly type="notice" value="1.303390,2.072190,010,1 1 1 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="124.86.229.146" dst_port="23"/>
        </slice>
        <from usec="0" sec="1483246800"/>
        <to usec="0" sec="1483247268"/>
    </anomaly>
    <anomaly type="notice" value="1.099680,2.180250,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="128.221.55.241"/>
        </slice>
        <from usec="0" sec="1483246806"/>
        <to usec="0" sec="1483247257"/>
    </anomaly>
    <anomaly type="notice" value="0.910737,2.093270,010,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="150.107.47.132"/>
            <filter src_ip="54.26.163.21" src_port="48277" dst_port="23"/>
            <filter src_ip="54.26.163.21" src_port="48277" dst_port="2323"/>
        </slice>
        <from usec="0" sec="1483246832"/>
        <to usec="0" sec="1483247544"/>
    </anomaly>
    <anomaly type="notice" value="1.099680,2.180250,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="211.251.194.158"/>
        </slice>
        <from usec="0" sec="1483247228"/>
        <to usec="0" sec="1483247244"/>
    </anomaly>
    <anomaly type="notice" value="1.099680,2.180250,020,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="71.129.9.72"/>
        </slice>
        <from usec="0" sec="1483246800"/>
        <to usec="0" sec="1483247358"/>
    </anomaly>
    <anomaly type="notice" value="1.099680,2.180250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="221.13.92.253"/>
        </slice>
        <from usec="0" sec="1483246801"/>
        <to usec="0" sec="1483247358"/>
    </anomaly>
    <anomaly type="notice" value="1.099680,2.180250,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="17.29.169.200"/>
        </slice>
        <from usec="0" sec="1483247326"/>
        <to usec="0" sec="1483247327"/>
    </anomaly>
    <anomaly type="notice" value="1.099680,2.180250,020,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="52.211.150.253"/>
        </slice>
        <from usec="0" sec="1483246803"/>
        <to usec="0" sec="1483247445"/>
    </anomaly>
    <anomaly type="notice" value="1.099680,2.180250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="180.243.106.160"/>
        </slice>
        <from usec="0" sec="1483246800"/>
        <to usec="0" sec="1483247538"/>
    </anomaly>
    <anomaly type="notice" value="1.099680,2.180250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="220.79.25.86"/>
        </slice>
        <from usec="0" sec="1483246804"/>
        <to usec="0" sec="1483247527"/>
    </anomaly>
    <anomaly type="notice" value="0.910737,2.093270,999,1 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.250.244.71" src_port="25"/>
            <filter src_ip="202.250.244.71" dst_port="25"/>
        </slice>
        <from usec="0" sec="1483246812"/>
        <to usec="0" sec="1483247533"/>
    </anomaly>
    <anomaly type="notice" value="0.910737,2.093270,504,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.221.211.153" dst_ip="192.158.130.177" dst_port="443"/>
        </slice>
        <from usec="0" sec="1483246846"/>
        <to usec="0" sec="1483247588"/>
    </anomaly>
    <anomaly type="notice" value="1.099680,2.180250,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="204.76.209.218"/>
        </slice>
        <from usec="0" sec="1483247576"/>
        <to usec="0" sec="1483247582"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="204.105.125.5" src_port="53130" dst_port="53"/>
        </slice>
        <from usec="0" sec="1483246920"/>
        <to usec="0" sec="1483247692"/>
    </anomaly>
    <anomaly type="notice" value="1.030850,2.201480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.143.56.59" src_port="53"/>
            <filter src_ip="203.143.56.59" dst_port="53"/>
        </slice>
        <from usec="0" sec="1483246800"/>
        <to usec="0" sec="1483246846"/>
    </anomaly>
    <anomaly type="notice" value="1.192370,2.124270,999,1 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.143.56.35" dst_port="53"/>
        </slice>
        <from usec="0" sec="1483246800"/>
        <to usec="0" sec="1483247358"/>
    </anomaly>
    <anomaly type="notice" value="1.030850,2.201480,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.143.57.216" dst_port="53"/>
        </slice>
        <from usec="0" sec="1483246890"/>
        <to usec="0" sec="1483246936"/>
    </anomaly>
    <anomaly type="notice" value="1.245870,2.094510,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.143.56.59" src_port="53"/>
            <filter dst_ip="203.143.56.59" dst_port="53"/>
        </slice>
        <from usec="0" sec="1483246808"/>
        <to usec="0" sec="1483247660"/>
    </anomaly>
    <anomaly type="notice" value="0.826312,2.115370,999,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.143.51.155" dst_port="53"/>
        </slice>
        <from usec="0" sec="1483246890"/>
        <to usec="0" sec="1483246936"/>
    </anomaly>
    <anomaly type="notice" value="1.030850,2.201480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.143.51.158"/>
        </slice>
        <from usec="0" sec="1483246890"/>
        <to usec="0" sec="1483246936"/>
    </anomaly>
    <anomaly type="notice" value="1.030850,2.201480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.68.50.237"/>
        </slice>
        <from usec="0" sec="1483246890"/>
        <to usec="0" sec="1483246936"/>
    </anomaly>
    <anomaly type="notice" value="1.030850,2.201480,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.191.189.247"/>
        </slice>
        <from usec="0" sec="1483246935"/>
        <to usec="0" sec="1483246981"/>
    </anomaly>
    <anomaly type="notice" value="1.030850,2.201480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.221.216.27"/>
        </slice>
        <from usec="0" sec="1483247115"/>
        <to usec="0" sec="1483247161"/>
    </anomaly>
    <anomaly type="notice" value="1.030850,2.201480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.221.217.235" src_port="53"/>
        </slice>
        <from usec="0" sec="1483247115"/>
        <to usec="0" sec="1483247161"/>
    </anomaly>
    <anomaly type="notice" value="1.030850,2.201480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="203.143.61.242"/>
            <filter dst_ip="203.143.61.242" src_port="2049" dst_port="2049"/>
        </slice>
        <from usec="0" sec="1483247115"/>
        <to usec="0" sec="1483247161"/>
    </anomaly>
    <anomaly type="notice" value="1.030850,2.201480,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="163.221.225.241"/>
        </slice>
        <from usec="0" sec="1483247115"/>
        <to usec="0" sec="1483247161"/>
    </anomaly>
    <anomaly type="notice" value="1.245870,2.094510,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.143.56.38" dst_port="53"/>
        </slice>
        <from usec="0" sec="1483246801"/>
        <to usec="0" sec="1483247698"/>
    </anomaly>
    <anomaly type="notice" value="0.826312,2.115370,503,1 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.251.124.174" dst_ip="163.221.35.214" src_port="80"/>
        </slice>
        <from usec="0" sec="1483247115"/>
        <to usec="0" sec="1483247161"/>
    </anomaly>
    <anomaly type="notice" value="1.030850,2.201480,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.252.255.206" dst_port="50348"/>
        </slice>
        <from usec="0" sec="1483246890"/>
        <to usec="0" sec="1483247296"/>
    </anomaly>
    <anomaly type="notice" value="1.245870,2.094510,999,1 1 1 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.143.56.59" dst_port="53"/>
        </slice>
        <from usec="0" sec="1483246884"/>
        <to usec="0" sec="1483247700"/>
    </anomaly>
    <anomaly type="notice" value="1.030850,2.201480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.143.51.158"/>
        </slice>
        <from usec="0" sec="1483247115"/>
        <to usec="0" sec="1483247161"/>
    </anomaly>
    <anomaly type="notice" value="1.030850,2.201480,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.107.78.179" dst_port="54756"/>
        </slice>
        <from usec="0" sec="1483246890"/>
        <to usec="0" sec="1483247296"/>
    </anomaly>
    <anomaly type="notice" value="1.245870,2.094510,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.143.57.131" dst_port="53"/>
        </slice>
        <from usec="0" sec="1483247115"/>
        <to usec="0" sec="1483247561"/>
    </anomaly>
    <anomaly type="notice" value="1.030850,2.201480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.68.50.237"/>
        </slice>
        <from usec="0" sec="1483247115"/>
        <to usec="0" sec="1483247161"/>
    </anomaly>
    <anomaly type="notice" value="1.030850,2.201480,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.107.3.94"/>
        </slice>
        <from usec="0" sec="1483247115"/>
        <to usec="0" sec="1483247161"/>
    </anomaly>
    <anomaly type="notice" value="0.826312,2.115370,999,1 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="45.196.109.30" dst_ip="203.143.55.69" dst_port="161"/>
        </slice>
        <from usec="0" sec="1483247115"/>
        <to usec="0" sec="1483247426"/>
    </anomaly>
    <anomaly type="notice" value="1.030850,2.201480,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.252.253.154"/>
        </slice>
        <from usec="0" sec="1483247115"/>
        <to usec="0" sec="1483247161"/>
    </anomaly>
    <anomaly type="notice" value="1.030850,2.201480,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.107.79.27" dst_port="54748"/>
        </slice>
        <from usec="0" sec="1483246890"/>
        <to usec="0" sec="1483247296"/>
    </anomaly>
    <anomaly type="notice" value="1.019160,2.094380,999,1 1 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.243.225.207" dst_port="53"/>
        </slice>
        <from usec="0" sec="1483247115"/>
        <to usec="0" sec="1483247699"/>
    </anomaly>
    <anomaly type="notice" value="1.245870,2.094510,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.250.222.8" dst_port="53"/>
        </slice>
        <from usec="0" sec="1483247115"/>
        <to usec="0" sec="1483247681"/>
    </anomaly>
    <anomaly type="notice" value="1.030850,2.201480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.221.217.235" src_port="53"/>
        </slice>
        <from usec="0" sec="1483247250"/>
        <to usec="0" sec="1483247296"/>
    </anomaly>
    <anomaly type="notice" value="1.245870,2.094510,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.143.56.61" dst_port="53"/>
        </slice>
        <from usec="0" sec="1483246934"/>
        <to usec="0" sec="1483247565"/>
    </anomaly>
    <anomaly type="notice" value="1.030850,2.201480,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.252.255.189" dst_port="50356"/>
        </slice>
        <from usec="0" sec="1483247115"/>
        <to usec="0" sec="1483247296"/>
    </anomaly>
    <anomaly type="notice" value="1.245870,2.094510,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.143.57.191" dst_port="53"/>
        </slice>
        <from usec="0" sec="1483247115"/>
        <to usec="0" sec="1483247694"/>
    </anomaly>
    <anomaly type="notice" value="1.030850,2.201480,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="36.213.147.133"/>
        </slice>
        <from usec="0" sec="1483247250"/>
        <to usec="0" sec="1483247296"/>
    </anomaly>
    <anomaly type="notice" value="1.030850,2.201480,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.252.253.196" dst_port="50348"/>
        </slice>
        <from usec="0" sec="1483247115"/>
        <to usec="0" sec="1483247296"/>
    </anomaly>
    <anomaly type="notice" value="1.030850,2.201480,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.107.79.6" dst_port="54756"/>
        </slice>
        <from usec="0" sec="1483246890"/>
        <to usec="0" sec="1483247296"/>
    </anomaly>
    <anomaly type="notice" value="1.030850,2.201480,503,0 0 0 0 0 0 1 0 0 0 0 0,ntscACKt">
        <slice>
            <filter src_ip="45.149.133.8"/>
        </slice>
        <from usec="0" sec="1483247430"/>
        <to usec="0" sec="1483247476"/>
    </anomaly>
    <anomaly type="notice" value="1.030850,2.201480,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="106.202.242.233" dst_port="7777"/>
        </slice>
        <from usec="0" sec="1483247430"/>
        <to usec="0" sec="1483247476"/>
    </anomaly>
    <anomaly type="notice" value="1.030850,2.201480,020,0 0 0 0 0 0 1 0 0 0 0 0,hostout">
        <slice>
            <filter src_ip="133.231.40.15"/>
        </slice>
        <from usec="0" sec="1483247565"/>
        <to usec="0" sec="1483247611"/>
    </anomaly>
    <anomaly type="notice" value="1.030850,2.201480,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="94.159.241.6"/>
        </slice>
        <from usec="0" sec="1483247565"/>
        <to usec="0" sec="1483247611"/>
    </anomaly>
    <anomaly type="notice" value="1.030850,2.201480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.231.252.118" src_port="53"/>
        </slice>
        <from usec="0" sec="1483247565"/>
        <to usec="0" sec="1483247611"/>
    </anomaly>
    <anomaly type="notice" value="1.005410,2.131610,502,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="104.207.110.6"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.005410,2.131610,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="163.221.79.74" src_port="443"/>
            <filter dst_ip="163.221.79.74" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.184110,2.008430,504,1 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="133.246.163.235" dst_ip="151.106.21.143" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.184110,2.008430,504,1 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="157.173.217.122" dst_ip="151.106.57.143" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.005410,2.131610,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="160.50.134.156"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="163.221.253.138" dst_ip="104.188.136.116" src_port="49894" dst_port="443"/>
            <filter src_ip="163.221.253.114" dst_ip="104.188.136.116" src_port="39572" dst_port="443"/>
        </slice>
        <from usec="0" sec="1483247670"/>
        <to usec="0" sec="1483247673"/>
    </anomaly>
    <anomaly type="notice" value="0.668119,2.062920,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="182.154.45.238" dst_ip="203.143.51.137" src_port="59900" dst_port="80"/>
        </slice>
        <from usec="0" sec="1483246881"/>
        <to usec="0" sec="1483246891"/>
    </anomaly>
    <anomaly type="notice" value="1.005410,2.131610,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="31.50.75.199"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.005410,2.131610,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.221.35.220" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.334900,2.098920,503,0 0 0 0 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.221.33.235" src_port="80"/>
            <filter src_ip="217.168.18.84" dst_ip="163.221.33.235" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.794348,2.042560,503,1 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.221.110.62" src_port="80"/>
            <filter dst_ip="163.221.110.62" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.224900,2.020950,503,1 1 1 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="163.221.35.111" dst_port="443"/>
            <filter src_ip="163.221.35.111" dst_port="80"/>
            <filter dst_ip="17.27.90.18" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.005410,2.131610,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="206.133.5.17"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.184110,2.008430,504,1 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="163.221.35.84" dst_port="443"/>
            <filter dst_ip="31.50.75.199" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.300823,2.084240,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.221.63.220" dst_port="443"/>
            <filter src_ip="163.221.63.220" dst_port="80"/>
        </slice>
        <from usec="0" sec="1483247670"/>
        <to usec="0" sec="1483247673"/>
    </anomaly>
    <anomaly type="notice" value="1.005410,2.131610,011,0 0 0 0 0 0 0 0 0 1 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="93.191.189.247"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.334900,2.098920,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="151.106.89.207" dst_ip="163.221.35.113" src_port="443" dst_port="50297"/>
            <filter src_ip="151.106.89.207" dst_ip="163.221.35.113" src_port="443" dst_port="50296"/>
            <filter src_ip="151.106.89.207" dst_ip="163.221.35.113" src_port="443" dst_port="50295"/>
            <filter src_ip="151.106.89.207" dst_ip="163.221.35.113" src_port="443" dst_port="50282"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.184110,2.008430,503,1 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="188.58.127.123" dst_ip="163.221.35.111" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.334900,2.098920,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="67.60.246.89" dst_ip="163.221.55.108" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.334900,2.098920,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="68.248.29.162" dst_ip="202.243.224.202" src_port="80" dst_port="52899"/>
            <filter src_ip="68.248.29.162" dst_ip="202.243.224.202" src_port="80" dst_port="52874"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.334900,2.098920,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="133.231.117.236" dst_ip="123.148.159.183" src_port="4500" dst_port="52567"/>
            <filter src_ip="133.231.117.236" dst_ip="123.148.159.183" src_port="443" dst_port="58446"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.334900,2.098920,010,0 0 0 0 0 0 0 0 0 1 1 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="163.221.51.3" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.334900,2.098920,054,0 0 0 0 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter src_ip="17.101.245.73" dst_ip="163.221.33.216" src_port="443"/>
            <filter src_ip="17.81.217.226" dst_ip="163.221.33.216" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.184110,2.008430,504,1 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="203.143.62.205" dst_port="53"/>
            <filter src_ip="203.143.62.205" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.334900,2.098920,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="163.221.55.108" dst_ip="74.199.209.87" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.005410,2.131610,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="104.91.136.250" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
