<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.392421,1.440830,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="150.3.157.253"/>
        </slice>
        <from usec="0" sec="1486012352"/>
        <to usec="0" sec="1486012354"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.5.128.3" dst_ip="17.196.9.179" src_port="64185" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486011674"/>
        <to usec="0" sec="1486011681"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.124.147.235"/>
        </slice>
        <from usec="0" sec="1486011947"/>
        <to usec="0" sec="1486011995"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="110.83.38.233" dst_ip="202.254.254.98" src_port="47617" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486012203"/>
        <to usec="0" sec="1486012206"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.5.97.233" dst_ip="199.174.48.113" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486012095"/>
        <to usec="0" sec="1486012198"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="157.45.15.27" dst_ip="113.134.44.110" src_port="49492" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486012363"/>
        <to usec="0" sec="1486012405"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.5.31.231"/>
        </slice>
        <from usec="0" sec="1486011750"/>
        <to usec="0" sec="1486011753"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.5.130.35" dst_ip="17.196.9.44" src_port="49905" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486011921"/>
        <to usec="0" sec="1486011933"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.5.127.217"/>
        </slice>
        <from usec="0" sec="1486011613"/>
        <to usec="0" sec="1486011720"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.5.249.216"/>
        </slice>
        <from usec="0" sec="1486011865"/>
        <to usec="0" sec="1486011885"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="66.156.115.204"/>
        </slice>
        <from usec="0" sec="1486011764"/>
        <to usec="0" sec="1486011766"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="107.246.51.50" dst_ip="163.5.119.28" src_port="443" dst_port="37910" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486011930"/>
        <to usec="0" sec="1486011931"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.5.3.37"/>
        </slice>
        <from usec="0" sec="1486011603"/>
        <to usec="0" sec="1486011641"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.124.213.195"/>
        </slice>
        <from usec="0" sec="1486012118"/>
        <to usec="0" sec="1486012120"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.5.129.140" dst_ip="151.86.120.245" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486011718"/>
        <to usec="0" sec="1486011814"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.124.206.117" dst_ip="52.251.217.23" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486011801"/>
        <to usec="0" sec="1486012493"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.124.200.121" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486011628"/>
        <to usec="0" sec="1486012352"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.124.205.128" dst_ip="54.229.210.188" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486012265"/>
        <to usec="0" sec="1486012267"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.88.6.115"/>
        </slice>
        <from usec="0" sec="1486012062"/>
        <to usec="0" sec="1486012064"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="126.10.33.66" dst_ip="163.5.210.214" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486011748"/>
        <to usec="0" sec="1486011767"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.120.59.165"/>
        </slice>
        <from usec="0" sec="1486011930"/>
        <to usec="0" sec="1486011932"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.124.218.164" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486011656"/>
        <to usec="0" sec="1486012085"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.124.186.81" dst_ip="198.116.133.70" src_port="80" dst_port="11061" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486012095"/>
        <to usec="0" sec="1486012096"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.124.219.181"/>
        </slice>
        <from usec="0" sec="1486011633"/>
        <to usec="0" sec="1486011636"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.5.129.181" dst_ip="17.196.9.63" src_port="52973" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486012176"/>
        <to usec="0" sec="1486012205"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.235.24.121"/>
        </slice>
        <from usec="0" sec="1486012064"/>
        <to usec="0" sec="1486012097"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="120.130.147.133" dst_ip="163.5.129.19" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486011888"/>
        <to usec="0" sec="1486011889"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.5.129.167" dst_ip="204.243.196.191" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486011626"/>
        <to usec="0" sec="1486011628"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.76.145.2"/>
        </slice>
        <from usec="0" sec="1486012078"/>
        <to usec="0" sec="1486012080"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="49.157.98.243"/>
        </slice>
        <from usec="0" sec="1486012107"/>
        <to usec="0" sec="1486012126"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="218.214.250.115" dst_ip="163.5.208.24" src_port="63366" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486012167"/>
        <to usec="0" sec="1486012316"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="219.195.32.253" dst_ip="202.247.230.91" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486011625"/>
        <to usec="0" sec="1486011628"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.5.128.130"/>
        </slice>
        <from usec="0" sec="1486011716"/>
        <to usec="0" sec="1486011718"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="89.174.6.129" dst_ip="163.5.99.215" src_port="443" dst_port="53215" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486011695"/>
        <to usec="0" sec="1486011697"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.231.112.138" dst_ip="163.5.98.196" src_port="80" dst_port="43762" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486011628"/>
        <to usec="0" sec="1486011630"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.5.128.140" dst_ip="199.174.48.113" src_port="50639" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486012386"/>
        <to usec="0" sec="1486012388"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="173.59.131.114" dst_ip="203.76.158.67" src_port="39100" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486011985"/>
        <to usec="0" sec="1486011987"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.5.50.138" dst_ip="199.174.48.113" src_port="59455" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486011605"/>
        <to usec="0" sec="1486012391"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.124.201.116"/>
        </slice>
        <from usec="0" sec="1486011654"/>
        <to usec="0" sec="1486011735"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="104.187.254.138" dst_ip="163.5.130.39" src_port="80" dst_port="60565" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486012455"/>
        <to usec="0" sec="1486012457"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="104.184.155.104" dst_ip="202.247.230.166" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486011608"/>
        <to usec="0" sec="1486011621"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.124.254.20"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486011622"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.124.254.31"/>
        </slice>
        <from usec="0" sec="1486012380"/>
        <to usec="0" sec="1486012471"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="68.72.230.164"/>
        </slice>
        <from usec="0" sec="1486011937"/>
        <to usec="0" sec="1486011940"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.124.164.196"/>
        </slice>
        <from usec="0" sec="1486012041"/>
        <to usec="0" sec="1486012150"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.5.99.80" dst_ip="111.198.148.121" src_port="51448" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486011825"/>
        <to usec="0" sec="1486012054"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="126.18.53.55" dst_ip="202.254.254.116" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486012456"/>
        <to usec="0" sec="1486012496"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="180.151.72.202" dst_ip="203.76.158.67" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486011981"/>
        <to usec="0" sec="1486011984"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="1.131.9.66"/>
        </slice>
        <from usec="0" sec="1486011854"/>
        <to usec="0" sec="1486011856"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.247.224.189"/>
        </slice>
        <from usec="0" sec="1486012381"/>
        <to usec="0" sec="1486012383"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="69.185.130.249" dst_ip="203.76.148.192" src_port="50472" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486012453"/>
        <to usec="0" sec="1486012455"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.157.240.50" dst_ip="163.5.26.137" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486011742"/>
        <to usec="0" sec="1486011744"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.124.206.208" dst_ip="52.0.226.24" src_port="52840" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486011619"/>
        <to usec="0" sec="1486012312"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="69.185.130.235" dst_ip="203.76.148.192" src_port="25534" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486012416"/>
        <to usec="0" sec="1486012418"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="172.28.225.104"/>
        </slice>
        <from usec="0" sec="1486011988"/>
        <to usec="0" sec="1486012001"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.5.119.28" dst_ip="107.246.51.50" src_port="37910" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486011618"/>
        <to usec="0" sec="1486012501"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.5.73.38" dst_ip="52.180.31.184" src_port="53613" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486012329"/>
        <to usec="0" sec="1486012341"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.5.130.190" dst_ip="111.73.24.114" src_port="55208" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486012357"/>
        <to usec="0" sec="1486012362"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.5.126.213" dst_ip="178.94.234.53" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486011993"/>
        <to usec="0" sec="1486012153"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.5.131.114" dst_ip="199.174.48.65" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486011984"/>
        <to usec="0" sec="1486011994"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="61.28.207.67" dst_ip="203.76.145.19" src_port="49875" dst_port="995" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486011772"/>
        <to usec="0" sec="1486011774"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.5.99.27" dst_port="443"/>
            <filter src_ip="163.5.99.27" dst_port="8000"/>
        </slice>
        <from usec="0" sec="1486011636"/>
        <to usec="0" sec="1486012499"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.5.213.198"/>
        </slice>
        <from usec="0" sec="1486012463"/>
        <to usec="0" sec="1486012465"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.5.126.68" dst_ip="199.174.48.65" src_port="50693" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486011742"/>
        <to usec="0" sec="1486011744"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="198.224.122.131"/>
        </slice>
        <from usec="0" sec="1486012087"/>
        <to usec="0" sec="1486012089"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="124.94.202.242"/>
        </slice>
        <from usec="0" sec="1486011647"/>
        <to usec="0" sec="1486011649"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="54.240.117.244"/>
        </slice>
        <from usec="0" sec="1486011945"/>
        <to usec="0" sec="1486011947"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.124.7.11"/>
        </slice>
        <from usec="0" sec="1486012311"/>
        <to usec="0" sec="1486012313"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.5.125.229"/>
        </slice>
        <from usec="0" sec="1486012076"/>
        <to usec="0" sec="1486012080"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.124.149.201"/>
        </slice>
        <from usec="0" sec="1486011682"/>
        <to usec="0" sec="1486011685"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.24.74.221"/>
        </slice>
        <from usec="0" sec="1486011731"/>
        <to usec="0" sec="1486011733"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.124.200.53"/>
        </slice>
        <from usec="0" sec="1486012426"/>
        <to usec="0" sec="1486012429"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.5.127.194"/>
        </slice>
        <from usec="0" sec="1486012308"/>
        <to usec="0" sec="1486012461"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.5.19.165"/>
        </slice>
        <from usec="0" sec="1486012230"/>
        <to usec="0" sec="1486012264"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.5.227.156" dst_ip="219.222.16.132" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486011625"/>
        <to usec="0" sec="1486011627"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.124.210.102"/>
        </slice>
        <from usec="0" sec="1486011640"/>
        <to usec="0" sec="1486011643"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.5.123.152"/>
        </slice>
        <from usec="0" sec="1486011793"/>
        <to usec="0" sec="1486011796"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.207.39.127"/>
        </slice>
        <from usec="0" sec="1486012001"/>
        <to usec="0" sec="1486012003"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.5.3.74"/>
        </slice>
        <from usec="0" sec="1486011959"/>
        <to usec="0" sec="1486012045"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="116.112.16.115"/>
        </slice>
        <from usec="0" sec="1486012014"/>
        <to usec="0" sec="1486012016"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="60.25.154.3"/>
        </slice>
        <from usec="0" sec="1486012452"/>
        <to usec="0" sec="1486012454"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="98.233.14.182"/>
        </slice>
        <from usec="0" sec="1486011923"/>
        <to usec="0" sec="1486011925"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="213.150.151.54"/>
        </slice>
        <from usec="0" sec="1486011698"/>
        <to usec="0" sec="1486012385"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.124.211.63"/>
        </slice>
        <from usec="0" sec="1486011616"/>
        <to usec="0" sec="1486012275"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.61.155.12"/>
        </slice>
        <from usec="0" sec="1486012194"/>
        <to usec="0" sec="1486012197"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.5.24.52"/>
        </slice>
        <from usec="0" sec="1486011677"/>
        <to usec="0" sec="1486012093"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="133.124.187.15" dst_ip="198.136.79.196" dst_port="443"/>
        </slice>
        <from usec="0" sec="1486011603"/>
        <to usec="0" sec="1486012471"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.5.38.65"/>
        </slice>
        <from usec="0" sec="1486011954"/>
        <to usec="0" sec="1486011956"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="140.172.221.111"/>
        </slice>
        <from usec="0" sec="1486012416"/>
        <to usec="0" sec="1486012418"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="210.122.81.251"/>
        </slice>
        <from usec="0" sec="1486012372"/>
        <to usec="0" sec="1486012374"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.81.11.225" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1486012312"/>
        <to usec="0" sec="1486012324"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.197.183.229"/>
        </slice>
        <from usec="0" sec="1486012068"/>
        <to usec="0" sec="1486012091"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="187.129.72.40" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1486012499"/>
        <to usec="0" sec="1486012501"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.5.126.53"/>
        </slice>
        <from usec="0" sec="1486011957"/>
        <to usec="0" sec="1486011960"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="182.181.110.41"/>
        </slice>
        <from usec="0" sec="1486012201"/>
        <to usec="0" sec="1486012224"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="121.22.194.32"/>
        </slice>
        <from usec="0" sec="1486012240"/>
        <to usec="0" sec="1486012252"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.232.111.33"/>
        </slice>
        <from usec="0" sec="1486011710"/>
        <to usec="0" sec="1486011723"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.84.214.185"/>
        </slice>
        <from usec="0" sec="1486011711"/>
        <to usec="0" sec="1486011729"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="189.191.166.71"/>
        </slice>
        <from usec="0" sec="1486011777"/>
        <to usec="0" sec="1486011786"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="219.105.214.66"/>
        </slice>
        <from usec="0" sec="1486011932"/>
        <to usec="0" sec="1486011943"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.161.192.191"/>
        </slice>
        <from usec="0" sec="1486011967"/>
        <to usec="0" sec="1486011970"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="213.128.167.66"/>
        </slice>
        <from usec="0" sec="1486012134"/>
        <to usec="0" sec="1486012157"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.187.37.154"/>
        </slice>
        <from usec="0" sec="1486012195"/>
        <to usec="0" sec="1486012206"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.218.191.123"/>
        </slice>
        <from usec="0" sec="1486011698"/>
        <to usec="0" sec="1486011725"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.108.255.138" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1486012194"/>
        <to usec="0" sec="1486012196"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.205.90.175"/>
        </slice>
        <from usec="0" sec="1486012168"/>
        <to usec="0" sec="1486012179"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.5.139.165"/>
        </slice>
        <from usec="0" sec="1486011807"/>
        <to usec="0" sec="1486012352"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="178.166.141.164" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1486011823"/>
        <to usec="0" sec="1486011830"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.241.59.190"/>
        </slice>
        <from usec="0" sec="1486012240"/>
        <to usec="0" sec="1486012242"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="200.87.70.254" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486011910"/>
        <to usec="0" sec="1486011915"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.85.254.199"/>
        </slice>
        <from usec="0" sec="1486012211"/>
        <to usec="0" sec="1486012232"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="105.42.124.220" dst_port="53413" proto="udp"/>
        </slice>
        <from usec="0" sec="1486012066"/>
        <to usec="0" sec="1486012067"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.84.35.122"/>
        </slice>
        <from usec="0" sec="1486012131"/>
        <to usec="0" sec="1486012149"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.5.10.173"/>
        </slice>
        <from usec="0" sec="1486011969"/>
        <to usec="0" sec="1486011971"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="118.91.59.29"/>
        </slice>
        <from usec="0" sec="1486012461"/>
        <to usec="0" sec="1486012463"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="112.152.36.159"/>
        </slice>
        <from usec="0" sec="1486011638"/>
        <to usec="0" sec="1486012271"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.76.145.17"/>
        </slice>
        <from usec="0" sec="1486011969"/>
        <to usec="0" sec="1486011971"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.76.148.48"/>
        </slice>
        <from usec="0" sec="1486011680"/>
        <to usec="0" sec="1486012288"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,011,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="190.108.142.18"/>
        </slice>
        <from usec="0" sec="1486011804"/>
        <to usec="0" sec="1486011806"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.5.130.14"/>
        </slice>
        <from usec="0" sec="1486011655"/>
        <to usec="0" sec="1486011657"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.174.61.1"/>
        </slice>
        <from usec="0" sec="1486012204"/>
        <to usec="0" sec="1486012206"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="5.243.25.241"/>
        </slice>
        <from usec="0" sec="1486011840"/>
        <to usec="0" sec="1486011842"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.124.160.13"/>
        </slice>
        <from usec="0" sec="1486011724"/>
        <to usec="0" sec="1486011726"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.160.171.13"/>
        </slice>
        <from usec="0" sec="1486012043"/>
        <to usec="0" sec="1486012486"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="220.105.235.246"/>
        </slice>
        <from usec="0" sec="1486011814"/>
        <to usec="0" sec="1486011816"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.5.97.249"/>
        </slice>
        <from usec="0" sec="1486011700"/>
        <to usec="0" sec="1486011702"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="212.137.210.251"/>
        </slice>
        <from usec="0" sec="1486011960"/>
        <to usec="0" sec="1486011962"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.124.109.243"/>
        </slice>
        <from usec="0" sec="1486011854"/>
        <to usec="0" sec="1486011856"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.5.128.6"/>
        </slice>
        <from usec="0" sec="1486012499"/>
        <to usec="0" sec="1486012501"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.103.93.27"/>
        </slice>
        <from usec="0" sec="1486012343"/>
        <to usec="0" sec="1486012346"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="163.5.224.27" dst_port="53"/>
        </slice>
        <from usec="0" sec="1486012496"/>
        <to usec="0" sec="1486012498"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,901,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="46.245.144.24"/>
        </slice>
        <from usec="0" sec="1486011608"/>
        <to usec="0" sec="1486011610"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.124.160.30"/>
        </slice>
        <from usec="0" sec="1486011766"/>
        <to usec="0" sec="1486011768"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.124.172.227"/>
        </slice>
        <from usec="0" sec="1486012081"/>
        <to usec="0" sec="1486012083"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.124.221.205"/>
        </slice>
        <from usec="0" sec="1486011618"/>
        <to usec="0" sec="1486011620"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.124.144.213"/>
        </slice>
        <from usec="0" sec="1486011848"/>
        <to usec="0" sec="1486011850"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.124.163.208"/>
        </slice>
        <from usec="0" sec="1486012387"/>
        <to usec="0" sec="1486012468"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.5.40.48"/>
        </slice>
        <from usec="0" sec="1486011721"/>
        <to usec="0" sec="1486011723"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.5.126.35"/>
        </slice>
        <from usec="0" sec="1486012237"/>
        <to usec="0" sec="1486012239"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.5.98.50"/>
        </slice>
        <from usec="0" sec="1486012188"/>
        <to usec="0" sec="1486012190"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="115.80.25.219"/>
        </slice>
        <from usec="0" sec="1486012456"/>
        <to usec="0" sec="1486012458"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.124.219.206"/>
        </slice>
        <from usec="0" sec="1486011910"/>
        <to usec="0" sec="1486011913"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="203.76.149.206"/>
        </slice>
        <from usec="0" sec="1486012362"/>
        <to usec="0" sec="1486012365"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="87.158.41.210"/>
        </slice>
        <from usec="0" sec="1486012186"/>
        <to usec="0" sec="1486012189"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="141.152.142.45"/>
        </slice>
        <from usec="0" sec="1486011618"/>
        <to usec="0" sec="1486011620"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.76.145.19" dst_port="993"/>
            <filter src_ip="59.114.233.184" dst_ip="203.76.145.19" dst_port="143"/>
        </slice>
        <from usec="0" sec="1486011990"/>
        <to usec="0" sec="1486012333"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.124.204.41"/>
        </slice>
        <from usec="0" sec="1486011814"/>
        <to usec="0" sec="1486011816"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,011,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.124.201.202"/>
        </slice>
        <from usec="0" sec="1486011811"/>
        <to usec="0" sec="1486011813"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="152.200.130.63"/>
        </slice>
        <from usec="0" sec="1486011611"/>
        <to usec="0" sec="1486011613"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="46.37.174.122"/>
        </slice>
        <from usec="0" sec="1486011825"/>
        <to usec="0" sec="1486011827"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="46.37.174.119"/>
        </slice>
        <from usec="0" sec="1486011712"/>
        <to usec="0" sec="1486011714"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.5.129.144"/>
        </slice>
        <from usec="0" sec="1486012251"/>
        <to usec="0" sec="1486012253"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.247.224.81"/>
        </slice>
        <from usec="0" sec="1486011862"/>
        <to usec="0" sec="1486011864"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="218.109.23.170"/>
        </slice>
        <from usec="0" sec="1486011768"/>
        <to usec="0" sec="1486011770"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="192.185.129.149"/>
        </slice>
        <from usec="0" sec="1486011804"/>
        <to usec="0" sec="1486011806"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.124.202.94"/>
        </slice>
        <from usec="0" sec="1486012466"/>
        <to usec="0" sec="1486012468"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.5.3.101"/>
        </slice>
        <from usec="0" sec="1486011622"/>
        <to usec="0" sec="1486011625"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.5.1.129"/>
        </slice>
        <from usec="0" sec="1486011807"/>
        <to usec="0" sec="1486011809"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.5.19.140"/>
        </slice>
        <from usec="0" sec="1486011784"/>
        <to usec="0" sec="1486011786"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.124.254.184"/>
        </slice>
        <from usec="0" sec="1486011840"/>
        <to usec="0" sec="1486011842"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.5.67.90" dst_ip="23.220.190.133" dst_port="80"/>
        </slice>
        <from usec="0" sec="1486011622"/>
        <to usec="0" sec="1486012438"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="183.214.61.130"/>
        </slice>
        <from usec="0" sec="1486011852"/>
        <to usec="0" sec="1486011854"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.5.16.136"/>
        </slice>
        <from usec="0" sec="1486011726"/>
        <to usec="0" sec="1486011728"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="223.150.247.74"/>
        </slice>
        <from usec="0" sec="1486011859"/>
        <to usec="0" sec="1486011861"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.5.97.130"/>
        </slice>
        <from usec="0" sec="1486012436"/>
        <to usec="0" sec="1486012438"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.124.201.190"/>
        </slice>
        <from usec="0" sec="1486012387"/>
        <to usec="0" sec="1486012389"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.5.131.3" dst_ip="209.115.208.84" dst_port="80"/>
        </slice>
        <from usec="0" sec="1486011617"/>
        <to usec="0" sec="1486012498"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.124.6.244"/>
        </slice>
        <from usec="0" sec="1486011718"/>
        <to usec="0" sec="1486011720"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="212.178.253.122"/>
        </slice>
        <from usec="0" sec="1486012488"/>
        <to usec="0" sec="1486012490"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.5.98.230"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486011602"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.5.127.28"/>
        </slice>
        <from usec="0" sec="1486011955"/>
        <to usec="0" sec="1486011957"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.124.254.26"/>
        </slice>
        <from usec="0" sec="1486012142"/>
        <to usec="0" sec="1486012144"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.124.164.198"/>
        </slice>
        <from usec="0" sec="1486012448"/>
        <to usec="0" sec="1486012450"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="89.89.131.222"/>
        </slice>
        <from usec="0" sec="1486012499"/>
        <to usec="0" sec="1486012501"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.124.164.205"/>
        </slice>
        <from usec="0" sec="1486012167"/>
        <to usec="0" sec="1486012170"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.103.92.182"/>
        </slice>
        <from usec="0" sec="1486011845"/>
        <to usec="0" sec="1486011847"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="216.168.137.42"/>
        </slice>
        <from usec="0" sec="1486012421"/>
        <to usec="0" sec="1486012423"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.124.164.221"/>
        </slice>
        <from usec="0" sec="1486011737"/>
        <to usec="0" sec="1486012175"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.5.131.33"/>
        </slice>
        <from usec="0" sec="1486011768"/>
        <to usec="0" sec="1486011770"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.5.178.192"/>
        </slice>
        <from usec="0" sec="1486011952"/>
        <to usec="0" sec="1486011954"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.228.40.194"/>
        </slice>
        <from usec="0" sec="1486011729"/>
        <to usec="0" sec="1486011731"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.154.31.139"/>
        </slice>
        <from usec="0" sec="1486011879"/>
        <to usec="0" sec="1486011881"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.134.95.188"/>
        </slice>
        <from usec="0" sec="1486011718"/>
        <to usec="0" sec="1486011726"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACKt">
        <slice>
            <filter src_ip="163.5.66.2"/>
        </slice>
        <from usec="0" sec="1486011877"/>
        <to usec="0" sec="1486011879"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="69.185.130.238"/>
        </slice>
        <from usec="0" sec="1486012054"/>
        <to usec="0" sec="1486012056"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="218.214.251.45"/>
        </slice>
        <from usec="0" sec="1486012426"/>
        <to usec="0" sec="1486012428"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.5.129.43"/>
        </slice>
        <from usec="0" sec="1486011621"/>
        <to usec="0" sec="1486011623"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="49.157.77.89"/>
        </slice>
        <from usec="0" sec="1486012083"/>
        <to usec="0" sec="1486012085"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="114.27.38.222"/>
        </slice>
        <from usec="0" sec="1486011795"/>
        <to usec="0" sec="1486011797"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="117.227.223.91"/>
        </slice>
        <from usec="0" sec="1486012010"/>
        <to usec="0" sec="1486012013"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.5.254.218"/>
        </slice>
        <from usec="0" sec="1486011848"/>
        <to usec="0" sec="1486011850"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.5.21.144"/>
        </slice>
        <from usec="0" sec="1486012237"/>
        <to usec="0" sec="1486012239"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.124.91.1"/>
        </slice>
        <from usec="0" sec="1486012481"/>
        <to usec="0" sec="1486012484"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.124.108.178"/>
        </slice>
        <from usec="0" sec="1486011955"/>
        <to usec="0" sec="1486011957"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,999,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="45.243.209.69"/>
        </slice>
        <from usec="0" sec="1486011881"/>
        <to usec="0" sec="1486011883"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="209.117.247.70"/>
        </slice>
        <from usec="0" sec="1486012072"/>
        <to usec="0" sec="1486012074"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.124.211.56"/>
        </slice>
        <from usec="0" sec="1486011632"/>
        <to usec="0" sec="1486011776"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="61.59.105.18"/>
        </slice>
        <from usec="0" sec="1486012423"/>
        <to usec="0" sec="1486012425"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="17.145.92.6"/>
        </slice>
        <from usec="0" sec="1486011889"/>
        <to usec="0" sec="1486011891"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="38.60.225.200"/>
        </slice>
        <from usec="0" sec="1486011768"/>
        <to usec="0" sec="1486011770"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.5.190.45"/>
        </slice>
        <from usec="0" sec="1486012271"/>
        <to usec="0" sec="1486012273"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="203.76.152.143"/>
        </slice>
        <from usec="0" sec="1486012021"/>
        <to usec="0" sec="1486012023"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="208.95.106.93"/>
        </slice>
        <from usec="0" sec="1486012198"/>
        <to usec="0" sec="1486012200"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="23.104.41.164"/>
        </slice>
        <from usec="0" sec="1486012466"/>
        <to usec="0" sec="1486012501"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.124.164.199" dst_ip="52.20.55.127" dst_port="443"/>
            <filter src_ip="133.124.164.199" dst_ip="52.174.149.209" dst_port="443"/>
        </slice>
        <from usec="0" sec="1486011626"/>
        <to usec="0" sec="1486012350"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="192.123.10.176"/>
        </slice>
        <from usec="0" sec="1486012246"/>
        <to usec="0" sec="1486012248"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="40.37.214.128"/>
        </slice>
        <from usec="0" sec="1486012303"/>
        <to usec="0" sec="1486012305"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.199.79.16"/>
        </slice>
        <from usec="0" sec="1486011963"/>
        <to usec="0" sec="1486011965"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.76.158.67"/>
        </slice>
        <from usec="0" sec="1486011705"/>
        <to usec="0" sec="1486011707"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.76.152.107"/>
        </slice>
        <from usec="0" sec="1486011709"/>
        <to usec="0" sec="1486011711"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="131.61.17.20"/>
        </slice>
        <from usec="0" sec="1486012025"/>
        <to usec="0" sec="1486012027"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="17.199.79.84"/>
        </slice>
        <from usec="0" sec="1486012092"/>
        <to usec="0" sec="1486012094"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.251.168.3" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1486011726"/>
        <to usec="0" sec="1486011737"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,999,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="212.132.166.28" dst_ip="203.76.145.122" src_port="64986" dst_port="25"/>
        </slice>
        <from usec="0" sec="1486012120"/>
        <to usec="0" sec="1486012124"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.124.125.222" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012150"/>
        <to usec="0" sec="1486012161"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="150.20.172.199" dst_ip="202.254.254.98" src_port="39691" dst_port="80"/>
        </slice>
        <from usec="0" sec="1486011966"/>
        <to usec="0" sec="1486011968"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.31.175.217" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012258"/>
        <to usec="0" sec="1486012280"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="95.23.219.58" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011697"/>
        <to usec="0" sec="1486011722"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,999,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.76.151.39" dst_ip="216.168.137.42" src_port="62091" dst_port="25"/>
        </slice>
        <from usec="0" sec="1486012369"/>
        <to usec="0" sec="1486012371"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="188.201.235.38" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012409"/>
        <to usec="0" sec="1486012434"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.124.223.138" dst_port="443"/>
        </slice>
        <from usec="0" sec="1486011726"/>
        <to usec="0" sec="1486012020"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,503,1 1 1 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.5.99.148" dst_port="443"/>
            <filter src_ip="163.5.99.148" dst_port="80"/>
        </slice>
        <from usec="0" sec="1486011708"/>
        <to usec="0" sec="1486011717"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="89.192.85.137" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012329"/>
        <to usec="0" sec="1486012348"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.208.188.117" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011650"/>
        <to usec="0" sec="1486011671"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.254.254.88" src_port="25"/>
            <filter src_ip="202.254.254.88" dst_port="25"/>
        </slice>
        <from usec="0" sec="1486011986"/>
        <to usec="0" sec="1486012050"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.24.145.161" dst_ip="202.254.254.126" dst_port="80"/>
        </slice>
        <from usec="0" sec="1486011870"/>
        <to usec="0" sec="1486011874"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.5.45.252" dst_ip="78.155.125.125" dst_port="80"/>
        </slice>
        <from usec="0" sec="1486011857"/>
        <to usec="0" sec="1486011965"/>
    </anomaly>
    <anomaly type="notice" value="0.743156,1.461590,504,1 1 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.254.206.128" dst_ip="13.152.158.129" dst_port="443"/>
            <filter src_ip="202.254.206.128" dst_ip="40.45.0.156" dst_port="443"/>
            <filter src_ip="202.254.206.128" dst_ip="23.110.58.94" dst_port="443"/>
        </slice>
        <from usec="0" sec="1486011609"/>
        <to usec="0" sec="1486012271"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.5.129.101" dst_ip="91.212.152.6" src_port="60637" dst_port="80"/>
        </slice>
        <from usec="0" sec="1486011908"/>
        <to usec="0" sec="1486011920"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.173.160.199" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012293"/>
        <to usec="0" sec="1486012314"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="94.228.121.48" dst_port="22"/>
        </slice>
        <from usec="0" sec="1486011744"/>
        <to usec="0" sec="1486011767"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,503,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.5.244.185" dst_port="80"/>
            <filter src_ip="163.5.244.185" dst_port="443"/>
        </slice>
        <from usec="0" sec="1486011640"/>
        <to usec="0" sec="1486012038"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,503,1 1 1 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.5.71.116" dst_ip="64.190.237.156" dst_port="80"/>
            <filter src_ip="163.5.71.116" dst_ip="64.190.239.76" dst_port="80"/>
        </slice>
        <from usec="0" sec="1486011812"/>
        <to usec="0" sec="1486012100"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,999,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.124.185.1" dst_ip="180.101.173.97" src_port="46732" dst_port="25"/>
        </slice>
        <from usec="0" sec="1486011923"/>
        <to usec="0" sec="1486011926"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.124.107.245" dst_ip="112.244.134.148" src_port="443" dst_port="53378"/>
        </slice>
        <from usec="0" sec="1486011698"/>
        <to usec="0" sec="1486011739"/>
    </anomaly>
    <anomaly type="notice" value="0.743156,1.461590,503,1 1 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.5.36.246"/>
        </slice>
        <from usec="0" sec="1486011640"/>
        <to usec="0" sec="1486012289"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.72.150.211" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011921"/>
        <to usec="0" sec="1486011940"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.5.129.40" dst_ip="183.141.40.43" dst_port="80"/>
            <filter src_ip="163.5.129.40" dst_ip="183.141.40.46" dst_port="80"/>
        </slice>
        <from usec="0" sec="1486011716"/>
        <to usec="0" sec="1486012064"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.46.245.91" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011795"/>
        <to usec="0" sec="1486011812"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.119.75.154" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011735"/>
        <to usec="0" sec="1486011755"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,502,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.23.183.90" dst_ip="163.5.209.245" src_port="63244" dst_port="22"/>
        </slice>
        <from usec="0" sec="1486012493"/>
        <to usec="0" sec="1486012497"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.5.50.234" dst_ip="91.185.87.82" src_port="39436" dst_port="80"/>
            <filter src_ip="163.5.50.234" dst_ip="91.185.87.82" src_port="39432" dst_port="80"/>
            <filter src_ip="163.5.50.234" dst_ip="91.185.84.152" src_port="49213" dst_port="80"/>
            <filter src_ip="163.5.50.234" dst_ip="91.185.82.152" src_port="56263" dst_port="80"/>
        </slice>
        <from usec="0" sec="1486011818"/>
        <to usec="0" sec="1486011861"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.105.152.118" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012312"/>
        <to usec="0" sec="1486012330"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,503,1 1 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter src_ip="162.44.219.1" dst_ip="163.5.208.23"/>
            <filter src_ip="162.44.219.1" dst_port="80"/>
            <filter dst_ip="163.5.208.23" dst_port="80"/>
        </slice>
        <from usec="0" sec="1486012359"/>
        <to usec="0" sec="1486012365"/>
    </anomaly>
    <anomaly type="notice" value="0.687140,1.518050,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.76.154.80" dst_ip="203.76.154.80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1486011766"/>
        <to usec="0" sec="1486012457"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,503,1 1 1 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="202.247.230.91" dst_port="80"/>
        </slice>
        <from usec="0" sec="1486011700"/>
        <to usec="0" sec="1486012423"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.5.129.211" dst_ip="42.143.157.243" dst_port="80"/>
        </slice>
        <from usec="0" sec="1486011759"/>
        <to usec="0" sec="1486011781"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.199.32.43" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011891"/>
        <to usec="0" sec="1486011926"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="191.44.227.140" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012457"/>
        <to usec="0" sec="1486012468"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.168.108.149" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012449"/>
        <to usec="0" sec="1486012471"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.154.102.77" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012452"/>
        <to usec="0" sec="1486012464"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.239.92.97" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012341"/>
        <to usec="0" sec="1486012353"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,503,1 1 1 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.5.1.148" dst_port="443"/>
            <filter src_ip="163.5.1.148" dst_ip="198.121.231.25" dst_port="80"/>
            <filter src_ip="163.5.1.148" dst_ip="178.248.35.14" dst_port="80"/>
        </slice>
        <from usec="0" sec="1486011995"/>
        <to usec="0" sec="1486011997"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="79.146.121.16" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011811"/>
        <to usec="0" sec="1486011823"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.119.206.230" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011863"/>
        <to usec="0" sec="1486011890"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="89.195.185.53" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011854"/>
        <to usec="0" sec="1486011869"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.5.27.47" dst_ip="104.243.224.6" dst_port="80"/>
            <filter src_ip="163.5.27.47" dst_ip="52.168.175.30" dst_port="443"/>
        </slice>
        <from usec="0" sec="1486011779"/>
        <to usec="0" sec="1486011781"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.118.120.54" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012141"/>
        <to usec="0" sec="1486012159"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="183.214.118.185" dst_ip="202.254.254.97" src_port="51661" dst_port="80"/>
        </slice>
        <from usec="0" sec="1486011818"/>
        <to usec="0" sec="1486011820"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="61.251.133.105" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011961"/>
        <to usec="0" sec="1486011998"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.38.0.69" src_port="3106" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1486011929"/>
        <to usec="0" sec="1486011930"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.19.123.118" src_port="2642" dst_port="3390"/>
        </slice>
        <from usec="0" sec="1486012374"/>
        <to usec="0" sec="1486012376"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="119.242.179.99" src_port="3859" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1486012029"/>
        <to usec="0" sec="1486012031"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,999,1 1 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="133.124.251.243" dst_ip="195.48.21.104" dst_port="53"/>
        </slice>
        <from usec="0" sec="1486011839"/>
        <to usec="0" sec="1486011842"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="94.228.103.10" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012274"/>
        <to usec="0" sec="1486012280"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.189.160.3" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012040"/>
        <to usec="0" sec="1486012063"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.169.161.251" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1486011668"/>
        <to usec="0" sec="1486011678"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,999,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="54.240.117.245" dst_ip="202.254.254.88" src_port="39292" dst_port="25"/>
        </slice>
        <from usec="0" sec="1486011963"/>
        <to usec="0" sec="1486011965"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.199.181.237" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012490"/>
        <to usec="0" sec="1486012501"/>
    </anomaly>
    <anomaly type="notice" value="0.968853,1.484240,999,1 1 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="103.221.121.237" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1486012365"/>
        <to usec="0" sec="1486012411"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.108.142.18" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011798"/>
        <to usec="0" sec="1486011807"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.182.194.20" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012066"/>
        <to usec="0" sec="1486012082"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.148.46.31" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011792"/>
        <to usec="0" sec="1486011811"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.108.32.48" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1486012486"/>
        <to usec="0" sec="1486012499"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="201.79.223.58" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011927"/>
        <to usec="0" sec="1486011956"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="111.181.68.222" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1486012160"/>
        <to usec="0" sec="1486012162"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="138.220.8.209" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012118"/>
        <to usec="0" sec="1486012130"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="64.64.34.55" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012005"/>
        <to usec="0" sec="1486012016"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.65.187.220" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011800"/>
        <to usec="0" sec="1486011813"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.196.120.219" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012013"/>
        <to usec="0" sec="1486012026"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.16.10.59" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1486012447"/>
        <to usec="0" sec="1486012459"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="80.183.24.216" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011850"/>
        <to usec="0" sec="1486011880"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.115.13.222" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011772"/>
        <to usec="0" sec="1486011794"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.99.214.118" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1486011706"/>
        <to usec="0" sec="1486011712"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="190.161.243.186" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011941"/>
        <to usec="0" sec="1486011956"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="212.123.152.150" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1486012499"/>
        <to usec="0" sec="1486012501"/>
    </anomaly>
    <anomaly type="notice" value="0.968853,1.484240,999,1 1 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.166.186.164" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486011646"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.213.209.155" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012123"/>
        <to usec="0" sec="1486012131"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="187.146.178.154" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012088"/>
        <to usec="0" sec="1486012106"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.84.116.181" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011885"/>
        <to usec="0" sec="1486011915"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.174.119.81" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012341"/>
        <to usec="0" sec="1486012372"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,502,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="121.146.238.125" dst_port="22"/>
        </slice>
        <from usec="0" sec="1486012197"/>
        <to usec="0" sec="1486012202"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="66.34.87.117" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012140"/>
        <to usec="0" sec="1486012151"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="115.139.96.120" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1486011653"/>
        <to usec="0" sec="1486011668"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="84.41.20.100" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1486011886"/>
        <to usec="0" sec="1486011897"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="117.54.64.133" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011952"/>
        <to usec="0" sec="1486011965"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="103.73.65.155" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1486011661"/>
        <to usec="0" sec="1486011673"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="201.170.59.163" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011738"/>
        <to usec="0" sec="1486011748"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.106.17.14" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012081"/>
        <to usec="0" sec="1486012094"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.247.66.130" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1486012419"/>
        <to usec="0" sec="1486012431"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="172.54.46.138" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011664"/>
        <to usec="0" sec="1486011685"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="179.228.216.5" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1486012019"/>
        <to usec="0" sec="1486012030"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.240.133.126" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012447"/>
        <to usec="0" sec="1486012474"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.16.59.242" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011956"/>
        <to usec="0" sec="1486011967"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="113.227.76.11" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011973"/>
        <to usec="0" sec="1486011984"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="89.167.71.240" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011897"/>
        <to usec="0" sec="1486011918"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.192.229.8" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012013"/>
        <to usec="0" sec="1486012036"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="152.198.8.132" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011999"/>
        <to usec="0" sec="1486012011"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="151.63.162.111" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012339"/>
        <to usec="0" sec="1486012362"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.190.96.147" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012022"/>
        <to usec="0" sec="1486012050"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="181.4.197.233" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011898"/>
        <to usec="0" sec="1486011922"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="183.220.116.235" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012055"/>
        <to usec="0" sec="1486012067"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.129.144.20" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011731"/>
        <to usec="0" sec="1486011743"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.193.55.97" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011979"/>
        <to usec="0" sec="1486012016"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="180.68.147.99" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1486011852"/>
        <to usec="0" sec="1486011860"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="81.246.184.98" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1486011757"/>
        <to usec="0" sec="1486011764"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="122.86.148.223" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011827"/>
        <to usec="0" sec="1486011838"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.189.112.78" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012472"/>
        <to usec="0" sec="1486012500"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.80.107.89" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1486012037"/>
        <to usec="0" sec="1486012046"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="189.158.20.219" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012308"/>
        <to usec="0" sec="1486012319"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="190.209.32.53" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011674"/>
        <to usec="0" sec="1486011710"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="179.186.65.55" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012005"/>
        <to usec="0" sec="1486012018"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="187.208.74.83" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1486012306"/>
        <to usec="0" sec="1486012316"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.87.126.211" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012200"/>
        <to usec="0" sec="1486012238"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.151.70.168" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1486011656"/>
        <to usec="0" sec="1486011668"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="181.174.57.52" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1486011697"/>
        <to usec="0" sec="1486011708"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.49.158.213" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011965"/>
        <to usec="0" sec="1486011990"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="122.91.34.179" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1486012235"/>
        <to usec="0" sec="1486012240"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.160.18.189" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1486011877"/>
        <to usec="0" sec="1486011889"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.107.179.183" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012461"/>
        <to usec="0" sec="1486012476"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="92.92.105.58" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011669"/>
        <to usec="0" sec="1486011702"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.40.183.40" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1486012234"/>
        <to usec="0" sec="1486012239"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.47.81.94" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1486012276"/>
        <to usec="0" sec="1486012279"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="182.79.252.165" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012039"/>
        <to usec="0" sec="1486012053"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="213.199.85.34" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012077"/>
        <to usec="0" sec="1486012090"/>
    </anomaly>
    <anomaly type="notice" value="0.968853,1.484240,010,1 1 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="186.10.112.224" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012365"/>
        <to usec="0" sec="1486012413"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="41.198.112.17" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011760"/>
        <to usec="0" sec="1486011773"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.166.233.55" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011744"/>
        <to usec="0" sec="1486011757"/>
    </anomaly>
    <anomaly type="notice" value="0.967040,1.562510,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="46.236.184.163" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1486011726"/>
        <to usec="0" sec="1486011731"/>
    </anomaly>
    <anomaly type="notice" value="0.743156,1.461590,010,1 1 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.138.248.155" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011635"/>
        <to usec="0" sec="1486012304"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="191.46.176.223" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012387"/>
        <to usec="0" sec="1486012398"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.5.190.68" dst_port="25"/>
        </slice>
        <from usec="0" sec="1486011664"/>
        <to usec="0" sec="1486012485"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="182.177.30.64" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012029"/>
        <to usec="0" sec="1486012032"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,999,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="142.15.93.161" dst_ip="202.254.254.88" src_port="16668" dst_port="25"/>
        </slice>
        <from usec="0" sec="1486011887"/>
        <to usec="0" sec="1486011889"/>
    </anomaly>
    <anomaly type="notice" value="0.968853,1.484240,010,1 1 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.188.121.130" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012365"/>
        <to usec="0" sec="1486012411"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,999,1 1 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="150.79.166.107" dst_ip="202.254.254.88" src_port="36899" dst_port="25"/>
        </slice>
        <from usec="0" sec="1486011846"/>
        <to usec="0" sec="1486011848"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.124.174.115" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486012422"/>
        <to usec="0" sec="1486012440"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.83.221.158" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011744"/>
        <to usec="0" sec="1486011769"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="106.200.42.50" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011874"/>
        <to usec="0" sec="1486011885"/>
    </anomaly>
    <anomaly type="notice" value="0.640440,1.472150,999,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.147.172.18" dst_ip="203.76.145.21" src_port="35358" dst_port="25"/>
        </slice>
        <from usec="0" sec="1486011862"/>
        <to usec="0" sec="1486011864"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012428"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="190.252.19.215"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486011708"/>
    </anomaly>
    <anomaly type="notice" value="0.544161,1.430040,504,1 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.5.213.197" dst_port="443"/>
        </slice>
        <from usec="0" sec="1486011612"/>
        <to usec="0" sec="1486012068"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="150.72.159.148"/>
        </slice>
        <from usec="0" sec="1486011614"/>
        <to usec="0" sec="1486011798"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.7.63.244"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486011887"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="114.81.32.246"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012157"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.232.89.61"/>
        </slice>
        <from usec="0" sec="1486011601"/>
        <to usec="0" sec="1486011886"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.124.200.95"/>
        </slice>
        <from usec="0" sec="1486011638"/>
        <to usec="0" sec="1486011880"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="94.148.112.1" src_port="34680"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486011975"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="81.172.227.161"/>
        </slice>
        <from usec="0" sec="1486011602"/>
        <to usec="0" sec="1486011978"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.193.117.150"/>
        </slice>
        <from usec="0" sec="1486011611"/>
        <to usec="0" sec="1486011965"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="125.255.77.226"/>
        </slice>
        <from usec="0" sec="1486011959"/>
        <to usec="0" sec="1486011961"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="61.52.61.170"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012068"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="91.234.205.182"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012068"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.5.6.106"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012256"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="65.74.88.141"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012059"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="38.146.18.3"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012022"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="178.252.233.173"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012068"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter src_ip="220.149.44.17"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012064"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="218.81.19.139"/>
        </slice>
        <from usec="0" sec="1486011601"/>
        <to usec="0" sec="1486012068"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="210.228.221.184"/>
        </slice>
        <from usec="0" sec="1486011601"/>
        <to usec="0" sec="1486012068"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="186.230.21.93"/>
        </slice>
        <from usec="0" sec="1486011603"/>
        <to usec="0" sec="1486012063"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="58.22.166.138"/>
        </slice>
        <from usec="0" sec="1486011603"/>
        <to usec="0" sec="1486012067"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.76.154.103"/>
        </slice>
        <from usec="0" sec="1486011604"/>
        <to usec="0" sec="1486012156"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.76.151.148"/>
        </slice>
        <from usec="0" sec="1486011606"/>
        <to usec="0" sec="1486012051"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="74.201.6.177"/>
        </slice>
        <from usec="0" sec="1486011606"/>
        <to usec="0" sec="1486012060"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter src_ip="220.151.209.105"/>
        </slice>
        <from usec="0" sec="1486011607"/>
        <to usec="0" sec="1486012055"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,503,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.103.91.144" dst_ip="64.183.184.52"/>
            <filter src_ip="133.103.91.144" src_port="445"/>
            <filter src_ip="133.103.86.100" dst_ip="64.183.184.52"/>
            <filter src_ip="133.103.86.100" src_port="445"/>
            <filter dst_ip="64.183.184.52" src_port="445"/>
            <filter dst_ip="64.183.184.52" dst_port="80"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486011997"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="109.23.115.63"/>
        </slice>
        <from usec="0" sec="1486011614"/>
        <to usec="0" sec="1486012063"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="62.45.247.238"/>
        </slice>
        <from usec="0" sec="1486011626"/>
        <to usec="0" sec="1486012046"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.76.147.37"/>
        </slice>
        <from usec="0" sec="1486011647"/>
        <to usec="0" sec="1486012034"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.124.212.64"/>
        </slice>
        <from usec="0" sec="1486011712"/>
        <to usec="0" sec="1486011957"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="104.187.254.98"/>
        </slice>
        <from usec="0" sec="1486011854"/>
        <to usec="0" sec="1486011959"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="208.84.113.45"/>
        </slice>
        <from usec="0" sec="1486011863"/>
        <to usec="0" sec="1486012428"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="42.196.8.72"/>
        </slice>
        <from usec="0" sec="1486011877"/>
        <to usec="0" sec="1486011978"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="23.51.30.34"/>
        </slice>
        <from usec="0" sec="1486011982"/>
        <to usec="0" sec="1486012064"/>
    </anomaly>
    <anomaly type="notice" value="0.544161,1.430040,503,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.124.219.151" dst_ip="209.246.242.80" dst_port="80"/>
        </slice>
        <from usec="0" sec="1486012005"/>
        <to usec="0" sec="1486012034"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="198.86.49.117"/>
        </slice>
        <from usec="0" sec="1486012017"/>
        <to usec="0" sec="1486012023"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012428"/>
    </anomaly>
    <anomaly type="notice" value="0.544161,1.430040,504,1 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.76.154.93" dst_port="443"/>
            <filter src_ip="74.24.93.163" dst_ip="203.76.154.93" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012465"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="74.24.93.163"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012158"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.5.126.192"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012149"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="190.97.128.222"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012338"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.76.150.121"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012142"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,020,0 0 0 1 0 0 0 0 0 0 0 0,hostout">
        <slice>
            <filter src_ip="202.254.201.188"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012156"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.72.173.57" dst_port="54748"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012158"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="85.228.222.136"/>
        </slice>
        <from usec="0" sec="1486011601"/>
        <to usec="0" sec="1486012158"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="107.231.210.92"/>
        </slice>
        <from usec="0" sec="1486011602"/>
        <to usec="0" sec="1486012130"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="113.227.42.131"/>
        </slice>
        <from usec="0" sec="1486011602"/>
        <to usec="0" sec="1486012155"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="113.125.7.140"/>
        </slice>
        <from usec="0" sec="1486011603"/>
        <to usec="0" sec="1486012154"/>
    </anomaly>
    <anomaly type="notice" value="0.544161,1.430040,503,1 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.76.148.220" dst_port="80"/>
        </slice>
        <from usec="0" sec="1486011606"/>
        <to usec="0" sec="1486012457"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.121.84.252"/>
        </slice>
        <from usec="0" sec="1486011606"/>
        <to usec="0" sec="1486012156"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="150.72.51.85"/>
        </slice>
        <from usec="0" sec="1486011623"/>
        <to usec="0" sec="1486012092"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="60.106.221.145"/>
        </slice>
        <from usec="0" sec="1486011630"/>
        <to usec="0" sec="1486012097"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.76.153.9"/>
        </slice>
        <from usec="0" sec="1486011647"/>
        <to usec="0" sec="1486012143"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="114.82.109.104"/>
        </slice>
        <from usec="0" sec="1486011653"/>
        <to usec="0" sec="1486012158"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.254.254.97"/>
        </slice>
        <from usec="0" sec="1486011817"/>
        <to usec="0" sec="1486012150"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="77.165.240.54"/>
        </slice>
        <from usec="0" sec="1486011858"/>
        <to usec="0" sec="1486012157"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,901,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="69.47.165.227"/>
        </slice>
        <from usec="0" sec="1486012025"/>
        <to usec="0" sec="1486012026"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="205.190.209.199"/>
        </slice>
        <from usec="0" sec="1486012050"/>
        <to usec="0" sec="1486012109"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.76.149.210"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012248"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="194.187.149.252"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012239"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.76.157.61"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012248"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.5.98.114"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012241"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.124.237.47"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012200"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="207.232.236.177"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012248"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="125.190.102.0"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012248"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,502,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="202.247.230.69" dst_ip="116.1.117.225"/>
            <filter src_ip="202.247.230.69" src_port="22"/>
            <filter dst_ip="37.149.2.159" src_port="22"/>
            <filter dst_ip="116.1.117.225" src_port="22"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012380"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="139.82.91.235"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012248"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="217.210.217.135"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012123"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="27.245.97.57"/>
        </slice>
        <from usec="0" sec="1486011601"/>
        <to usec="0" sec="1486012243"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="219.122.160.239"/>
        </slice>
        <from usec="0" sec="1486011602"/>
        <to usec="0" sec="1486012247"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="79.146.50.72"/>
        </slice>
        <from usec="0" sec="1486011604"/>
        <to usec="0" sec="1486012246"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="113.194.87.219"/>
        </slice>
        <from usec="0" sec="1486011604"/>
        <to usec="0" sec="1486012241"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.5.66.47" dst_port="443"/>
            <filter src_ip="163.5.66.47" dst_ip="109.255.94.21" dst_port="80"/>
        </slice>
        <from usec="0" sec="1486011606"/>
        <to usec="0" sec="1486012245"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.132.141.52"/>
        </slice>
        <from usec="0" sec="1486011608"/>
        <to usec="0" sec="1486012231"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="109.210.29.185"/>
        </slice>
        <from usec="0" sec="1486011608"/>
        <to usec="0" sec="1486012247"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.76.157.32"/>
        </slice>
        <from usec="0" sec="1486011621"/>
        <to usec="0" sec="1486012224"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="104.217.114.132"/>
        </slice>
        <from usec="0" sec="1486011631"/>
        <to usec="0" sec="1486012229"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="92.14.127.211"/>
        </slice>
        <from usec="0" sec="1486011634"/>
        <to usec="0" sec="1486012248"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="163.5.0.134"/>
        </slice>
        <from usec="0" sec="1486011811"/>
        <to usec="0" sec="1486012205"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="52.182.121.150"/>
        </slice>
        <from usec="0" sec="1486012145"/>
        <to usec="0" sec="1486012226"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.76.154.76"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012336"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="220.1.36.124"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012338"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="81.183.114.123"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012338"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter src_ip="206.35.26.185"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012338"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="114.83.29.136"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012337"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,020,0 0 0 1 0 0 0 0 0 0 0 0,hostout">
        <slice>
            <filter src_ip="203.76.155.116"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012338"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="52.168.7.202"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012338"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="203.111.120.33"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012338"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="208.102.25.204"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012338"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,011,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.124.170.169"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012334"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="128.248.215.4"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012338"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="200.216.220.30"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012338"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="47.238.44.66"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012335"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.119.158.121" dst_ip="203.76.148.55" dst_port="161"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012298"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.187.228.8"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012335"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="47.21.237.21"/>
        </slice>
        <from usec="0" sec="1486011601"/>
        <to usec="0" sec="1486012338"/>
    </anomaly>
    <anomaly type="notice" value="0.544161,1.430040,999,1 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="203.76.145.21" src_port="25"/>
        </slice>
        <from usec="0" sec="1486011601"/>
        <to usec="0" sec="1486012331"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="82.17.249.222"/>
        </slice>
        <from usec="0" sec="1486011602"/>
        <to usec="0" sec="1486012333"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="203.76.158.67"/>
        </slice>
        <from usec="0" sec="1486011602"/>
        <to usec="0" sec="1486012336"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.186.104.96"/>
        </slice>
        <from usec="0" sec="1486011602"/>
        <to usec="0" sec="1486012333"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="121.39.175.34"/>
        </slice>
        <from usec="0" sec="1486011602"/>
        <to usec="0" sec="1486012337"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="95.118.216.153"/>
        </slice>
        <from usec="0" sec="1486011603"/>
        <to usec="0" sec="1486012335"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="82.167.171.191"/>
        </slice>
        <from usec="0" sec="1486011603"/>
        <to usec="0" sec="1486012338"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="211.34.235.185"/>
        </slice>
        <from usec="0" sec="1486011604"/>
        <to usec="0" sec="1486012336"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="1.210.6.236"/>
        </slice>
        <from usec="0" sec="1486011604"/>
        <to usec="0" sec="1486012335"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="177.106.5.48"/>
        </slice>
        <from usec="0" sec="1486011605"/>
        <to usec="0" sec="1486012337"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.103.89.208"/>
        </slice>
        <from usec="0" sec="1486011605"/>
        <to usec="0" sec="1486012285"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,020,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="47.161.124.104"/>
        </slice>
        <from usec="0" sec="1486011607"/>
        <to usec="0" sec="1486012324"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="220.148.55.230"/>
        </slice>
        <from usec="0" sec="1486011614"/>
        <to usec="0" sec="1486012338"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="31.208.3.2"/>
        </slice>
        <from usec="0" sec="1486011615"/>
        <to usec="0" sec="1486012330"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="221.159.120.112"/>
        </slice>
        <from usec="0" sec="1486011617"/>
        <to usec="0" sec="1486012327"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="213.149.161.118"/>
        </slice>
        <from usec="0" sec="1486011619"/>
        <to usec="0" sec="1486012332"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="163.5.130.23"/>
        </slice>
        <from usec="0" sec="1486011834"/>
        <to usec="0" sec="1486012312"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.124.108.175"/>
        </slice>
        <from usec="0" sec="1486011853"/>
        <to usec="0" sec="1486012337"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="150.72.58.151"/>
        </slice>
        <from usec="0" sec="1486011895"/>
        <to usec="0" sec="1486012337"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.124.204.49"/>
        </slice>
        <from usec="0" sec="1486011924"/>
        <to usec="0" sec="1486012317"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="59.115.121.20"/>
        </slice>
        <from usec="0" sec="1486012097"/>
        <to usec="0" sec="1486012338"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="54.234.189.136"/>
        </slice>
        <from usec="0" sec="1486012158"/>
        <to usec="0" sec="1486012275"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="222.102.203.36"/>
        </slice>
        <from usec="0" sec="1486012207"/>
        <to usec="0" sec="1486012293"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="216.108.211.26"/>
        </slice>
        <from usec="0" sec="1486012258"/>
        <to usec="0" sec="1486012327"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="69.88.132.228"/>
        </slice>
        <from usec="0" sec="1486012311"/>
        <to usec="0" sec="1486012319"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="54.229.209.123"/>
        </slice>
        <from usec="0" sec="1486012311"/>
        <to usec="0" sec="1486012338"/>
    </anomaly>
    <anomaly type="notice" value="0.544161,1.430040,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="219.217.33.197" dst_ip="163.5.26.137" dst_port="80"/>
            <filter src_ip="219.217.33.197" dst_ip="163.5.210.214" dst_port="80"/>
        </slice>
        <from usec="0" sec="1486012314"/>
        <to usec="0" sec="1486012345"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="125.14.104.31"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012428"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.76.144.192"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012428"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="109.234.30.98"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012423"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.76.147.96"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012350"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="178.172.199.113"/>
        </slice>
        <from usec="0" sec="1486011601"/>
        <to usec="0" sec="1486012428"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.6.83.244"/>
        </slice>
        <from usec="0" sec="1486011601"/>
        <to usec="0" sec="1486012428"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.76.145.60"/>
        </slice>
        <from usec="0" sec="1486011601"/>
        <to usec="0" sec="1486012428"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="119.183.226.197"/>
        </slice>
        <from usec="0" sec="1486011602"/>
        <to usec="0" sec="1486012427"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="163.5.131.88"/>
        </slice>
        <from usec="0" sec="1486011602"/>
        <to usec="0" sec="1486012427"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="46.224.110.97"/>
        </slice>
        <from usec="0" sec="1486011602"/>
        <to usec="0" sec="1486012425"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="125.111.76.212" src_port="3984" dst_port="23"/>
        </slice>
        <from usec="0" sec="1486011603"/>
        <to usec="0" sec="1486012427"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="85.161.60.61"/>
        </slice>
        <from usec="0" sec="1486011604"/>
        <to usec="0" sec="1486012417"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="2.74.147.164"/>
        </slice>
        <from usec="0" sec="1486011606"/>
        <to usec="0" sec="1486012414"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="92.77.157.135"/>
        </slice>
        <from usec="0" sec="1486011608"/>
        <to usec="0" sec="1486012422"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="59.186.160.173"/>
        </slice>
        <from usec="0" sec="1486011608"/>
        <to usec="0" sec="1486012425"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="144.111.29.181"/>
        </slice>
        <from usec="0" sec="1486011608"/>
        <to usec="0" sec="1486012413"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="150.72.142.195"/>
        </slice>
        <from usec="0" sec="1486011609"/>
        <to usec="0" sec="1486012411"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="183.172.29.235"/>
        </slice>
        <from usec="0" sec="1486011610"/>
        <to usec="0" sec="1486012428"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.5.130.254"/>
        </slice>
        <from usec="0" sec="1486011610"/>
        <to usec="0" sec="1486012420"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.192.80.130"/>
        </slice>
        <from usec="0" sec="1486011614"/>
        <to usec="0" sec="1486012407"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="5.70.38.229"/>
        </slice>
        <from usec="0" sec="1486011641"/>
        <to usec="0" sec="1486012426"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="54.250.213.122"/>
        </slice>
        <from usec="0" sec="1486011707"/>
        <to usec="0" sec="1486012422"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="114.82.21.43"/>
        </slice>
        <from usec="0" sec="1486011720"/>
        <to usec="0" sec="1486012423"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="211.171.57.151"/>
        </slice>
        <from usec="0" sec="1486011809"/>
        <to usec="0" sec="1486012422"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="50.19.8.210"/>
        </slice>
        <from usec="0" sec="1486011896"/>
        <to usec="0" sec="1486012253"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="92.50.9.54"/>
        </slice>
        <from usec="0" sec="1486011996"/>
        <to usec="0" sec="1486012427"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="199.244.176.183"/>
        </slice>
        <from usec="0" sec="1486012283"/>
        <to usec="0" sec="1486012418"/>
    </anomaly>
    <anomaly type="notice" value="0.598422,1.477250,901,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="118.138.134.141"/>
        </slice>
        <from usec="0" sec="1486012394"/>
        <to usec="0" sec="1486012395"/>
    </anomaly>
    <anomaly type="notice" value="0.862847,1.499650,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="89.0.147.239"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486011646"/>
    </anomaly>
    <anomaly type="notice" value="0.862847,1.499650,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="66.240.212.154"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486011646"/>
    </anomaly>
    <anomaly type="notice" value="0.862847,1.499650,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="198.116.69.92"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486011646"/>
    </anomaly>
    <anomaly type="notice" value="0.862847,1.499650,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="71.25.88.10"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486011646"/>
    </anomaly>
    <anomaly type="notice" value="0.862847,1.499650,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="167.12.178.147"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486011646"/>
    </anomaly>
    <anomaly type="notice" value="0.862847,1.499650,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="45.160.156.195" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486011646"/>
    </anomaly>
    <anomaly type="notice" value="0.862847,1.499650,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.103.78.53" dst_port="50348"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486011646"/>
    </anomaly>
    <anomaly type="notice" value="0.862847,1.499650,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.72.206.133" dst_port="54748"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486011646"/>
    </anomaly>
    <anomaly type="notice" value="0.862847,1.499650,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.72.206.150" dst_port="54756"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486011646"/>
    </anomaly>
    <anomaly type="notice" value="0.826140,1.453170,999,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="209.59.87.243" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486011646"/>
    </anomaly>
    <anomaly type="notice" value="0.862847,1.499650,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="185.127.148.21" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486011646"/>
    </anomaly>
    <anomaly type="notice" value="0.862847,1.499650,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="208.84.122.135" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486011646"/>
    </anomaly>
    <anomaly type="notice" value="0.862847,1.499650,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.76.152.253"/>
        </slice>
        <from usec="0" sec="1486011690"/>
        <to usec="0" sec="1486011736"/>
    </anomaly>
    <anomaly type="notice" value="0.862847,1.499650,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.76.147.178" dst_port="53"/>
        </slice>
        <from usec="0" sec="1486011690"/>
        <to usec="0" sec="1486011736"/>
    </anomaly>
    <anomaly type="notice" value="0.862847,1.499650,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.146.106.1"/>
        </slice>
        <from usec="0" sec="1486012005"/>
        <to usec="0" sec="1486012051"/>
    </anomaly>
    <anomaly type="notice" value="0.862847,1.499650,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="203.76.148.130"/>
        </slice>
        <from usec="0" sec="1486012140"/>
        <to usec="0" sec="1486012186"/>
    </anomaly>
    <anomaly type="notice" value="0.862847,1.499650,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.76.159.38"/>
        </slice>
        <from usec="0" sec="1486012140"/>
        <to usec="0" sec="1486012186"/>
    </anomaly>
    <anomaly type="notice" value="0.862847,1.499650,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.72.206.133" dst_port="54748"/>
        </slice>
        <from usec="0" sec="1486012140"/>
        <to usec="0" sec="1486012186"/>
    </anomaly>
    <anomaly type="notice" value="0.941606,1.489290,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.76.149.195" dst_port="53"/>
        </slice>
        <from usec="0" sec="1486011600"/>
        <to usec="0" sec="1486012186"/>
    </anomaly>
    <anomaly type="notice" value="0.862847,1.499650,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="163.5.224.33" dst_port="53"/>
        </slice>
        <from usec="0" sec="1486012275"/>
        <to usec="0" sec="1486012321"/>
    </anomaly>
    <anomaly type="notice" value="0.862847,1.499650,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="14.52.73.170"/>
        </slice>
        <from usec="0" sec="1486012365"/>
        <to usec="0" sec="1486012411"/>
    </anomaly>
    <anomaly type="notice" value="0.862847,1.499650,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.124.148.85"/>
        </slice>
        <from usec="0" sec="1486012365"/>
        <to usec="0" sec="1486012411"/>
    </anomaly>
    <anomaly type="notice" value="0.862847,1.499650,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.124.187.158" src_port="53"/>
        </slice>
        <from usec="0" sec="1486012365"/>
        <to usec="0" sec="1486012411"/>
    </anomaly>
    <anomaly type="notice" value="0.862847,1.499650,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.243.212.213" src_port="12200"/>
        </slice>
        <from usec="0" sec="1486012365"/>
        <to usec="0" sec="1486012411"/>
    </anomaly>
    <anomaly type="notice" value="0.862847,1.499650,503,0 0 0 0 0 0 1 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="183.214.251.195" src_port="80"/>
        </slice>
        <from usec="0" sec="1486012365"/>
        <to usec="0" sec="1486012411"/>
    </anomaly>
    <anomaly type="notice" value="0.930503,1.478310,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="111.164.200.237"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.930503,1.478310,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="120.130.147.38"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.930503,1.478310,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="121.196.86.4"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.930503,1.478310,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="128.254.135.148"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.930503,1.478310,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="133.124.182.82"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.930503,1.478310,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="139.82.104.125"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.930503,1.478310,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="139.82.170.207" dst_port="3479"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.930503,1.478310,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="14.100.38.43"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.896571,1.431140,503,1 0 0 0 0 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="163.5.99.37" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.930503,1.478310,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="163.5.98.192" src_port="3439"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.392421,1.440830,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.5.50.138" dst_ip="23.105.33.188" dst_port="443"/>
        </slice>
        <from usec="0" sec="1486011886"/>
        <to usec="0" sec="1486011997"/>
    </anomaly>
    <anomaly type="notice" value="0.930503,1.478310,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="177.63.63.121"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.930503,1.478310,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="178.120.227.205"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.930503,1.478310,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYNt">
        <slice>
            <filter src_ip="180.177.211.251"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.930503,1.478310,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="183.141.40.43"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.930503,1.478310,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="184.25.42.29"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.930503,1.478310,020,0 0 0 0 0 0 0 0 0 1 0 0,icmp_error">
        <slice>
            <filter src_ip="203.76.147.245"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.930503,1.478310,999,0 0 0 0 0 0 0 0 0 1 0 0,ipv4gretun">
        <slice>
            <filter src_ip="204.186.49.14"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.930503,1.478310,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="211.5.92.61"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.930503,1.478310,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="54.229.226.203"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.896571,1.431140,999,1 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="5.173.87.26" dst_ip="163.5.129.163" src_port="89" dst_port="62963"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.930503,1.478310,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="93.184.216.136"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.896571,1.431140,999,1 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="163.5.196.163" dst_ip="104.125.6.128" dst_port="9418"/>
            <filter src_ip="163.5.196.13" dst_ip="104.125.6.128" dst_port="9418"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.930503,1.478310,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="64.190.237.156" dst_ip="163.5.71.116" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.930503,1.478310,999,0 0 0 0 0 0 0 0 0 1 0 0,ipv4gretun">
        <slice>
            <filter src_ip="203.76.148.248" dst_ip="206.35.26.185"/>
            <filter src_ip="203.76.148.248" dst_ip="204.186.49.14"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.930503,1.478310,020,0 0 0 0 0 0 0 0 0 1 0 0,ptpDoSIC">
        <slice>
            <filter dst_ip="66.30.155.109"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
