<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="suspicious" value="1.20863,1.51045,999,0 0 0 0 0 0 0 0 0 0 0 1,alphfl">
        <slice>
            <filter src_ip="203.75.12.57" dst_ip="98.28.209.4"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.32798,1.50483,999,1 1 1 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.34.31.116" dst_port="993"/>
        </slice>
        <from usec="0" sec="1504933324"/>
        <to usec="0" sec="1504933992"/>
    </anomaly>
    <anomaly type="suspicious" value="1.44841,1.47246,504,1 1 1 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="208.220.147.11" dst_ip="203.75.4.42" src_port="443" dst_port="40012"/>
            <filter src_ip="208.220.147.11" dst_ip="203.75.4.42" src_port="443" dst_port="40005"/>
            <filter src_ip="208.220.147.11" dst_ip="203.75.4.42" src_port="443" dst_port="40004"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.32798,1.50483,011,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="182.108.24.199" src_port="445"/>
        </slice>
        <from usec="0" sec="1504933866"/>
        <to usec="0" sec="1504933867"/>
    </anomaly>
    <anomaly type="suspicious" value="1.32798,1.50483,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="207.229.1.37"/>
        </slice>
        <from usec="0" sec="1504933356"/>
        <to usec="0" sec="1504933821"/>
    </anomaly>
    <anomaly type="suspicious" value="1.32798,1.50483,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="14.159.102.159" src_port="3088" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1504933247"/>
        <to usec="0" sec="1504933753"/>
    </anomaly>
    <anomaly type="suspicious" value="1.32798,1.50483,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="119.24.135.66" src_port="53324" dst_port="3720"/>
        </slice>
        <from usec="0" sec="1504933324"/>
        <to usec="0" sec="1504933326"/>
    </anomaly>
    <anomaly type="suspicious" value="1.32798,1.50483,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="191.7.169.236"/>
        </slice>
        <from usec="0" sec="1504933604"/>
        <to usec="0" sec="1504933605"/>
    </anomaly>
    <anomaly type="suspicious" value="1.32798,1.50483,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="51.140.97.141" src_port="5076" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1504933445"/>
        <to usec="0" sec="1504933447"/>
    </anomaly>
    <anomaly type="suspicious" value="1.32798,1.50483,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="111.134.212.113"/>
        </slice>
        <from usec="0" sec="1504933501"/>
        <to usec="0" sec="1504933503"/>
    </anomaly>
    <anomaly type="suspicious" value="1.32798,1.50483,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="222.90.57.180" src_port="6000" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1504933531"/>
        <to usec="0" sec="1504933533"/>
    </anomaly>
    <anomaly type="suspicious" value="1.34512,1.48648,999,1 1 1 1 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="178.2.250.38" src_port="37538" dst_port="19"/>
        </slice>
        <from usec="0" sec="1504933493"/>
        <to usec="0" sec="1504934036"/>
    </anomaly>
    <anomaly type="suspicious" value="1.32798,1.50483,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="47.40.160.33"/>
        </slice>
        <from usec="0" sec="1504933529"/>
        <to usec="0" sec="1504933531"/>
    </anomaly>
    <anomaly type="suspicious" value="1.32798,1.50483,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="74.114.171.250"/>
        </slice>
        <from usec="0" sec="1504933647"/>
        <to usec="0" sec="1504933649"/>
    </anomaly>
    <anomaly type="suspicious" value="1.34512,1.48648,020,1 1 1 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="23.9.148.221"/>
        </slice>
        <from usec="0" sec="1504933811"/>
        <to usec="0" sec="1504933823"/>
    </anomaly>
    <anomaly type="suspicious" value="1.32798,1.50483,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="46.238.114.191"/>
        </slice>
        <from usec="0" sec="1504933203"/>
        <to usec="0" sec="1504933205"/>
    </anomaly>
    <anomaly type="suspicious" value="1.32798,1.50483,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="155.35.60.191"/>
        </slice>
        <from usec="0" sec="1504933612"/>
        <to usec="0" sec="1504933613"/>
    </anomaly>
    <anomaly type="suspicious" value="1.323,1.54162,999,0 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.75.0.146" dst_ip="95.116.16.198" src_port="8333" dst_port="55382"/>
        </slice>
        <from usec="0" sec="1504933338"/>
        <to usec="0" sec="1504933340"/>
    </anomaly>
    <anomaly type="suspicious" value="1.32798,1.50483,503,1 1 1 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.34.67.142" dst_ip="35.66.166.178" src_port="50204" dst_port="443"/>
            <filter src_ip="163.34.67.142" dst_ip="207.147.244.179" src_port="50196" dst_port="80"/>
            <filter src_ip="163.34.67.142" dst_ip="38.213.93.234" src_port="50211" dst_port="80"/>
        </slice>
        <from usec="0" sec="1504933982"/>
        <to usec="0" sec="1504933993"/>
    </anomaly>
    <anomaly type="suspicious" value="1.32798,1.50483,503,1 1 1 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.34.67.168" dst_ip="13.32.40.100" src_port="49628" dst_port="443"/>
            <filter src_ip="163.34.67.168" dst_ip="38.213.93.234" src_port="50251" dst_port="80"/>
            <filter src_ip="163.34.67.168" dst_ip="52.26.169.0" src_port="49615" dst_port="443"/>
            <filter src_ip="163.34.67.168" dst_ip="65.12.222.231" src_port="49618" dst_port="443"/>
        </slice>
        <from usec="0" sec="1504933974"/>
        <to usec="0" sec="1504933982"/>
    </anomaly>
    <anomaly type="suspicious" value="1.32798,1.50483,504,1 1 1 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="23.62.182.235" dst_ip="163.34.131.65" src_port="443" dst_port="56111"/>
            <filter src_ip="23.62.182.235" dst_ip="163.34.231.227" src_port="443" dst_port="51968"/>
        </slice>
        <from usec="0" sec="1504933865"/>
        <to usec="0" sec="1504933867"/>
    </anomaly>
    <anomaly type="suspicious" value="1.32798,1.50483,504,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.34.170.15" dst_ip="13.64.130.196" src_port="54172" dst_port="443"/>
        </slice>
        <from usec="0" sec="1504933856"/>
        <to usec="0" sec="1504933877"/>
    </anomaly>
    <anomaly type="suspicious" value="1.44841,1.47246,999,1 1 1 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="192.66.136.151" dst_port="161"/>
            <filter src_ip="192.66.136.151" dst_ip="203.75.10.229" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.32798,1.50483,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="51.140.106.110" src_port="5093" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1504933653"/>
        <to usec="0" sec="1504933655"/>
    </anomaly>
    <anomaly type="suspicious" value="1.32798,1.50483,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="172.151.129.121"/>
        </slice>
        <from usec="0" sec="1504933921"/>
        <to usec="0" sec="1504933923"/>
    </anomaly>
    <anomaly type="suspicious" value="1.05317,1.47065,020,1 0 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="107.65.71.82"/>
        </slice>
        <from usec="0" sec="1504933578"/>
        <to usec="0" sec="1504933865"/>
    </anomaly>
    <anomaly type="suspicious" value="1.32798,1.50483,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="36.105.150.225" dst_port="23"/>
        </slice>
        <from usec="0" sec="1504933682"/>
        <to usec="0" sec="1504933697"/>
    </anomaly>
    <anomaly type="suspicious" value="1.32798,1.50483,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="139.99.66.210"/>
        </slice>
        <from usec="0" sec="1504933321"/>
        <to usec="0" sec="1504933756"/>
    </anomaly>
    <anomaly type="suspicious" value="1.32798,1.50483,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="42.169.181.56"/>
        </slice>
        <from usec="0" sec="1504933861"/>
        <to usec="0" sec="1504933865"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11291,1.43057,020,1 0 0 1 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="203.75.6.52"/>
        </slice>
        <from usec="0" sec="1504933208"/>
        <to usec="0" sec="1504934031"/>
    </anomaly>
    <anomaly type="suspicious" value="0.945738,1.36598,999,1 1 0 1 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="163.34.128.21" dst_ip="158.62.110.227" dst_port="53"/>
            <filter src_ip="163.34.128.21" src_port="4753" dst_port="17788"/>
        </slice>
        <from usec="0" sec="1504933200"/>
        <to usec="0" sec="1504934097"/>
    </anomaly>
    <anomaly type="suspicious" value="1.21347,1.48342,999,1 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.75.0.145" src_port="8333"/>
        </slice>
        <from usec="0" sec="1504933200"/>
        <to usec="0" sec="1504934092"/>
    </anomaly>
    <anomaly type="suspicious" value="1.21347,1.48342,502,1 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.75.6.147" dst_ip="54.82.189.92" src_port="22"/>
        </slice>
        <from usec="0" sec="1504933200"/>
        <to usec="0" sec="1504934028"/>
    </anomaly>
    <anomaly type="suspicious" value="1.3442,1.45057,503,1 0 0 1 1 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.34.128.6" dst_port="80"/>
            <filter src_ip="163.34.128.6" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.32798,1.50483,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="207.238.47.21" dst_port="23"/>
        </slice>
        <from usec="0" sec="1504933878"/>
        <to usec="0" sec="1504933904"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20801,1.52072,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.34.131.144" dst_ip="74.58.46.203" src_port="58455" dst_port="443"/>
            <filter src_ip="163.34.131.144" dst_ip="74.58.46.203" src_port="58454" dst_port="443"/>
        </slice>
        <from usec="0" sec="1504933296"/>
        <to usec="0" sec="1504933300"/>
    </anomaly>
    <anomaly type="suspicious" value="1.1889,1.53867,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1504933200"/>
        <to usec="0" sec="1504934028"/>
    </anomaly>
    <anomaly type="suspicious" value="1.1889,1.53867,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1504933200"/>
        <to usec="0" sec="1504934028"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20801,1.52072,010,0 0 0 1 1 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="202.124.131.98" src_port="57089" dst_port="23"/>
        </slice>
        <from usec="0" sec="1504933201"/>
        <to usec="0" sec="1504933848"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20801,1.52072,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.75.6.8" dst_ip="220.117.144.115" src_port="80" dst_port="41473"/>
        </slice>
        <from usec="0" sec="1504933733"/>
        <to usec="0" sec="1504933750"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20801,1.52072,010,0 0 0 1 1 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="170.253.79.172" src_port="58332" dst_port="23"/>
        </slice>
        <from usec="0" sec="1504933200"/>
        <to usec="0" sec="1504933936"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20801,1.52072,504,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="5.252.207.205" dst_ip="163.34.67.233" src_port="443" dst_port="49513"/>
            <filter src_ip="5.252.207.205" dst_ip="163.34.67.233" src_port="443" dst_port="49512"/>
            <filter src_ip="5.252.207.205" dst_ip="163.34.196.221" src_port="443" dst_port="50368"/>
        </slice>
        <from usec="0" sec="1504933213"/>
        <to usec="0" sec="1504933920"/>
    </anomaly>
    <anomaly type="suspicious" value="1.21347,1.48342,503,1 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="133.139.72.106" dst_ip="113.157.35.6" dst_port="80"/>
            <filter src_ip="133.139.211.206" dst_ip="113.157.35.6" dst_port="80"/>
        </slice>
        <from usec="0" sec="1504933229"/>
        <to usec="0" sec="1504933935"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20801,1.52072,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="213.117.140.52" dst_ip="203.75.2.184" src_port="80" dst_port="15910"/>
            <filter src_ip="209.59.120.168" dst_ip="203.75.2.184" src_port="42826" dst_port="80"/>
        </slice>
        <from usec="0" sec="1504933905"/>
        <to usec="0" sec="1504933915"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20801,1.52072,502,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.11.222.133" dst_ip="58.42.171.157" src_port="22"/>
        </slice>
        <from usec="0" sec="1504933212"/>
        <to usec="0" sec="1504934004"/>
    </anomaly>
    <anomaly type="suspicious" value="1.76409,1.92096,901,0 0 0 0 0 1 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1504933200"/>
        <to usec="0" sec="1504933848"/>
    </anomaly>
    <anomaly type="suspicious" value="1.76409,1.92096,901,0 0 0 0 0 1 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1504933200"/>
        <to usec="0" sec="1504933848"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08606,1.48778,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.11.216.182" src_port="53"/>
        </slice>
        <from usec="0" sec="1504933245"/>
        <to usec="0" sec="1504933291"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08606,1.48778,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="51.140.232.208" src_port="56444"/>
        </slice>
        <from usec="0" sec="1504933335"/>
        <to usec="0" sec="1504933381"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08606,1.48778,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="59.109.67.32" src_port="443"/>
        </slice>
        <from usec="0" sec="1504933335"/>
        <to usec="0" sec="1504933381"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08606,1.48778,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.75.7.87" dst_port="53"/>
        </slice>
        <from usec="0" sec="1504933335"/>
        <to usec="0" sec="1504933381"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08606,1.48778,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.75.7.71" dst_port="53"/>
        </slice>
        <from usec="0" sec="1504933335"/>
        <to usec="0" sec="1504933381"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08606,1.48778,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.11.216.182" src_port="53"/>
        </slice>
        <from usec="0" sec="1504933515"/>
        <to usec="0" sec="1504933561"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08606,1.48778,011,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="130.3.18.81"/>
        </slice>
        <from usec="0" sec="1504933515"/>
        <to usec="0" sec="1504933561"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08606,1.48778,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="192.249.55.180" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1504933560"/>
        <to usec="0" sec="1504933606"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11291,1.43057,010,1 0 0 1 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="182.7.180.247" dst_port="22"/>
        </slice>
        <from usec="0" sec="1504933200"/>
        <to usec="0" sec="1504933938"/>
    </anomaly>
    <anomaly type="suspicious" value="1.11291,1.43057,010,1 0 0 1 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="104.240.220.174" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1504933538"/>
        <to usec="0" sec="1504934084"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08606,1.48778,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="196.7.213.69" src_port="10000" dst_port="22"/>
        </slice>
        <from usec="0" sec="1504933560"/>
        <to usec="0" sec="1504933651"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08606,1.48778,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.75.7.65" dst_port="53"/>
        </slice>
        <from usec="0" sec="1504934010"/>
        <to usec="0" sec="1504934056"/>
    </anomaly>
    <anomaly type="suspicious" value="1.08606,1.48778,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.150.149.84"/>
        </slice>
        <from usec="0" sec="1504934055"/>
        <to usec="0" sec="1504934101"/>
    </anomaly>
    <anomaly type="suspicious" value="1.43857,1.66384,020,0 0 0 0 0 0 0 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.34.38.189"/>
        </slice>
        <from usec="0" sec="1504934010"/>
        <to usec="0" sec="1504934056"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10159,1.30725,503,1 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="163.34.131.55" dst_ip="154.135.246.226" src_port="1241" dst_port="80"/>
            <filter src_ip="163.34.131.55" dst_ip="154.135.246.226" src_port="1240" dst_port="80"/>
            <filter src_ip="163.34.131.55" dst_ip="154.135.246.226" src_port="1239" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10696,1.46922,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPDNS">
        <slice>
            <filter src_ip="84.91.99.129" dst_port="53"/>
        </slice>
        <from usec="0" sec="1504933200"/>
        <to usec="0" sec="1504934056"/>
    </anomaly>
    <anomaly type="suspicious" value="1.1163,1.32894,504,0 0 0 1 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.34.130.195" src_port="443"/>
            <filter dst_ip="163.34.130.195" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20801,1.52072,010,0 0 0 1 1 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="103.216.203.1" src_port="2356" dst_port="23"/>
        </slice>
        <from usec="0" sec="1504933200"/>
        <to usec="0" sec="1504933752"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10159,1.30725,504,1 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="163.34.130.195" dst_port="443"/>
            <filter src_ip="163.34.130.195" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09558,1.34943,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="118.19.60.164" dst_ip="163.34.207.134" src_port="81"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09558,1.34943,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="173.59.240.76" dst_ip="198.97.73.147" src_port="443" dst_port="61353"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09558,1.34943,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="173.59.240.53" dst_ip="163.34.145.144" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09558,1.34943,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="173.59.202.183" dst_ip="163.34.217.128" src_port="443"/>
            <filter src_ip="173.59.202.183" dst_ip="163.34.130.217" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09558,1.34943,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="186.83.200.36" dst_port="445"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09558,1.34943,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="198.187.136.104" dst_ip="163.34.130.117" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09558,1.34943,010,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="222.46.186.95" src_port="28550" dst_port="23"/>
            <filter src_ip="222.46.186.95" src_port="28550" dst_port="2323"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09558,1.34943,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="52.233.73.5" dst_ip="163.34.130.144" src_port="443" dst_port="6724"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.1163,1.32894,504,0 0 0 1 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.34.128.26" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09558,1.34943,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="89.204.167.244" dst_ip="163.34.131.90" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09558,1.34943,010,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="94.157.201.190" src_port="58022"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09558,1.34943,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="172.38.249.207" dst_ip="202.11.216.42" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09558,1.34943,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="117.93.39.150" dst_ip="163.34.131.186" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10159,1.30725,504,1 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.34.202.165" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10159,1.30725,504,1 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="163.34.131.216" dst_ip="198.187.136.118" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.10159,1.30725,504,1 0 0 0 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter src_ip="163.34.170.57" dst_ip="52.171.204.74" src_port="60456" dst_port="443"/>
            <filter src_ip="133.154.185.216" dst_ip="52.171.204.74" src_port="55055" dst_port="443"/>
            <filter src_ip="163.34.144.102" dst_ip="52.171.204.74" src_port="59463" dst_port="443"/>
            <filter src_ip="133.154.238.145" dst_ip="52.171.204.74" src_port="47723" dst_port="443"/>
            <filter src_ip="203.75.18.187" dst_ip="52.171.204.74" src_port="56913" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.31102,1.69883,504,1 1 1 1 1 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="202.150.149.86" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.2006,2.32825,504,1 1 0 1 1 1 1 1 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="202.6.51.188"/>
            <filter src_ip="84.91.99.129" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.56883,1.48521,502,1 1 0 1 1 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="58.42.171.157" dst_port="22"/>
            <filter dst_ip="202.11.222.110" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.46584,1.79597,503,1 1 0 1 0 0 1 1 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="203.75.6.111" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.39072,1.79414,502,1 1 1 1 0 0 1 1 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="54.82.189.92" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.76834,1.69816,504,1 0 0 1 0 0 1 1 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="172.128.218.103" dst_ip="203.75.11.70" dst_port="443"/>
        </slice>
        <from usec="0" sec="1504933200"/>
        <to usec="0" sec="1504934091"/>
    </anomaly>
    <anomaly type="anomalous" value="1.57853,1.4458,504,1 0 0 1 1 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="162.225.219.186" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.67567,1.57859,010,1 1 1 1 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="42.228.0.138" src_port="6000" dst_port="3306"/>
        </slice>
        <from usec="0" sec="1504933212"/>
        <to usec="0" sec="1504933754"/>
    </anomaly>
    <anomaly type="anomalous" value="1.66421,1.50545,999,0 1 1 0 0 0 0 0 0 1 1 0,ipv4gretun">
        <slice>
            <filter src_ip="203.75.6.171" dst_ip="206.44.144.255"/>
            <filter src_ip="203.75.6.171" dst_ip="204.82.81.238"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.01521,1.5924,503,1 1 1 1 1 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter dst_ip="163.34.128.6" src_port="80"/>
            <filter dst_ip="163.34.128.6" src_port="443"/>
            <filter dst_ip="163.34.128.9" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.02691,1.56515,999,1 1 1 1 0 0 0 0 0 1 1 1,malphfl">
        <slice>
            <filter src_ip="220.71.171.39" dst_ip="203.75.6.171" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.70422,1.91359,503,1 1 0 1 1 0 1 1 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="203.75.11.72" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.93276,1.74365,999,1 1 0 0 0 0 1 1 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="61.7.96.78" dst_ip="202.140.3.147" dst_port="53"/>
            <filter src_ip="61.7.96.94" dst_ip="202.140.3.147" dst_port="53"/>
        </slice>
        <from usec="0" sec="1504933218"/>
        <to usec="0" sec="1504934101"/>
    </anomaly>
    <anomaly type="anomalous" value="2.01558,1.58259,504,1 1 1 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="209.41.232.202" dst_ip="163.34.66.157" src_port="443" dst_port="54019"/>
            <filter src_ip="209.41.232.202" dst_ip="163.34.66.157" src_port="443" dst_port="54003"/>
            <filter src_ip="209.41.232.202" dst_ip="163.34.66.157" src_port="443" dst_port="54002"/>
            <filter src_ip="209.41.232.202" dst_ip="163.34.66.157" src_port="443" dst_port="54001"/>
            <filter src_ip="209.41.232.202" dst_ip="163.34.66.157" src_port="443" dst_port="53974"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.66194,1.59588,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="171.0.107.191" dst_port="22"/>
        </slice>
        <from usec="0" sec="1504933335"/>
        <to usec="0" sec="1504933381"/>
    </anomaly>
    <anomaly type="anomalous" value="4.78743,3.91339,999,1 1 1 1 1 0 1 1 1 1 1 1,ntscUDPOther">
        <slice>
            <filter src_ip="212.50.54.83" dst_port="5067"/>
            <filter src_ip="212.50.54.83" dst_port="1025"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.58892,2.04927,999,1 0 0 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="203.75.12.57"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.9563,1.54329,020,1 1 1 1 0 0 1 0 0 1 1 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="212.50.54.83"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.67567,1.57859,010,1 1 1 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="209.59.120.168" dst_port="80"/>
            <filter src_ip="104.240.207.243" dst_port="119"/>
            <filter src_ip="212.92.73.171" src_port="3306"/>
        </slice>
        <from usec="0" sec="1504933200"/>
        <to usec="0" sec="1504934001"/>
    </anomaly>
    <anomaly type="anomalous" value="1.49241,1.43243,010,1 1 0 1 0 0 1 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="182.7.180.247" dst_port="22"/>
            <filter src_ip="178.2.238.21" src_port="53369" dst_port="445"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.58892,2.04927,503,1 0 0 1 1 1 0 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="203.75.6.111" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.02691,1.56515,010,1 1 1 1 0 0 0 0 0 1 1 1,ntscSYN139445">
        <slice>
            <filter src_ip="182.108.24.199" dst_port="445"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.76834,1.69816,999,1 0 0 1 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.75.1.244" dst_port="53"/>
        </slice>
        <from usec="0" sec="1504933200"/>
        <to usec="0" sec="1504934074"/>
    </anomaly>
    <anomaly type="anomalous" value="4.30335,3.70011,010,1 1 1 1 0 0 1 0 1 1 1 0,ntscSYN">
        <slice>
            <filter src_ip="123.6.198.205" src_port="6000" dst_port="81"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.2006,2.32825,504,1 1 0 1 1 1 1 1 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="202.150.149.86" src_port="443"/>
            <filter dst_ip="202.150.149.86" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.58637,2.07644,503,0 0 0 1 1 1 0 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="163.34.134.168" src_port="80"/>
            <filter src_ip="104.78.53.96" dst_ip="163.34.134.168" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.58892,2.04927,999,1 0 0 1 1 1 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="203.75.12.57"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.94204,1.56224,504,1 0 0 1 1 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="163.34.131.136" dst_port="443"/>
            <filter src_ip="163.34.131.136" dst_ip="199.122.121.25" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.09669,2.3063,504,1 0 0 1 1 1 1 1 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="163.34.134.168" dst_port="443"/>
            <filter dst_ip="111.221.29.255" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="4.39797,3.83316,999,1 1 1 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.75.14.62" dst_port="53"/>
        </slice>
        <from usec="0" sec="1504933335"/>
        <to usec="0" sec="1504934101"/>
    </anomaly>
    <anomaly type="anomalous" value="2.02496,1.68179,504,1 0 0 0 0 0 1 1 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.34.130.127" src_port="443"/>
            <filter dst_ip="163.34.130.127" src_port="30303" dst_port="30303"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.75156,1.74663,010,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="51.140.232.208" src_port="56444"/>
        </slice>
        <from usec="0" sec="1504934010"/>
        <to usec="0" sec="1504934056"/>
    </anomaly>
    <anomaly type="anomalous" value="1.75156,1.74663,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.75.225.45" src_port="53"/>
            <filter dst_ip="133.75.225.45" dst_port="53"/>
        </slice>
        <from usec="0" sec="1504934010"/>
        <to usec="0" sec="1504934056"/>
    </anomaly>
    <anomaly type="anomalous" value="1.75156,1.74663,502,0 0 0 0 0 0 1 1 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="218.57.226.36" src_port="22"/>
        </slice>
        <from usec="0" sec="1504934010"/>
        <to usec="0" sec="1504934056"/>
    </anomaly>
    <anomaly type="anomalous" value="1.75156,1.74663,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.11.216.182" src_port="53"/>
        </slice>
        <from usec="0" sec="1504934010"/>
        <to usec="0" sec="1504934056"/>
    </anomaly>
    <anomaly type="anomalous" value="1.86048,1.66954,502,1 0 0 1 0 0 1 1 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="59.46.163.97" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.5893,1.45477,999,0 0 0 1 0 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="133.154.248.40" src_port="53"/>
            <filter src_ip="133.154.248.40" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.5893,1.45477,999,0 0 0 1 0 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="163.34.130.127" dst_port="30303"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.51141,2.07569,052,1 1 1 1 1 1 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="54.82.189.92" dst_ip="203.75.7.127" dst_port="22"/>
            <filter src_ip="54.82.189.92" dst_ip="203.75.6.209" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.58637,2.07644,503,0 0 0 1 1 1 0 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="203.75.11.72" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.46414,1.4537,999,1 1 1 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="202.6.51.188" dst_port="53"/>
            <filter src_ip="202.6.7.213" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.5893,1.45477,504,0 0 0 1 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.34.131.191" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.5893,1.45477,504,0 0 0 1 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.34.131.216" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.09325,1.70188,504,1 0 0 0 0 0 0 1 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="31.141.172.31" src_port="443"/>
            <filter dst_ip="163.34.130.192" src_port="443"/>
            <filter dst_ip="163.34.130.192" src_port="80"/>
            <filter dst_ip="163.34.216.59" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.02169,1.71479,999,0 0 0 0 0 0 1 1 0 1 1 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.34.112.34" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.58637,2.07644,504,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="151.1.167.74" src_port="443"/>
            <filter dst_ip="163.34.130.161" src_port="443"/>
            <filter dst_ip="163.34.130.161" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.57853,1.4458,504,1 0 0 1 1 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.34.131.55" src_port="443"/>
            <filter dst_ip="163.34.131.55" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.5893,1.45477,504,0 0 0 1 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.34.144.34" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.09669,2.3063,503,1 0 0 1 1 1 1 1 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="202.11.216.158" src_port="443"/>
            <filter dst_ip="202.11.216.158" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.58637,2.07644,504,0 0 0 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.34.67.247" src_port="443"/>
            <filter src_ip="8.200.7.59" dst_ip="163.34.67.247" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.87608,2.15521,010,1 1 1 1 1 1 0 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="36.116.119.1" dst_port="8079"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.57482,1.47352,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.34.64.103" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.31668,1.81405,504,0 0 0 0 0 0 1 1 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.34.144.102" src_port="443"/>
            <filter dst_ip="163.34.170.57" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.57482,1.47352,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.34.144.230" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.57901,1.43498,504,1 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.34.145.56" src_port="80"/>
            <filter dst_ip="163.34.145.56" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.84454,1.71881,504,0 0 0 0 0 0 1 1 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.34.199.44" src_port="443"/>
            <filter dst_ip="163.34.199.44" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.59345,1.41573,503,1 0 0 1 0 0 0 0 0 1 1 1,alphflHTTP">
        <slice>
            <filter src_ip="104.26.24.247" dst_ip="163.34.130.157" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.57482,1.47352,010,0 0 0 0 0 0 0 0 0 1 1 1,sntscSYN">
        <slice>
            <filter src_ip="138.193.48.240" dst_port="2152"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.57482,1.47352,503,0 0 0 0 0 0 0 0 0 1 1 1,alphflHTTP">
        <slice>
            <filter src_ip="173.49.184.62" dst_ip="163.34.128.43" src_port="80" dst_port="59389"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
