<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="notice" value="0.558955,1.0692,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.213.100.158" dst_ip="172.255.116.250" src_port="55487" dst_port="25022" proto="udp"/>
        </slice>
        <from usec="0" sec="1533704629"/>
        <to usec="0" sec="1533705099"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="14.127.42.159" dst_ip="203.161.115.43" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1533704687"/>
        <to usec="0" sec="1533704689"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.213.102.8" dst_ip="133.123.96.111" src_port="11329" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1533704684"/>
        <to usec="0" sec="1533704700"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="72.38.186.153" dst_ip="163.213.7.69" src_port="443" dst_port="56766" proto="tcp"/>
        </slice>
        <from usec="0" sec="1533704435"/>
        <to usec="0" sec="1533704437"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.213.182.224"/>
        </slice>
        <from usec="0" sec="1533705195"/>
        <to usec="0" sec="1533705197"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="103.211.206.213" dst_ip="163.213.101.143" src_port="80" dst_port="50581" proto="tcp"/>
        </slice>
        <from usec="0" sec="1533704739"/>
        <to usec="0" sec="1533705296"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="183.241.74.222" dst_ip="163.213.124.159" src_port="993" dst_port="55377" proto="tcp"/>
        </slice>
        <from usec="0" sec="1533704974"/>
        <to usec="0" sec="1533704976"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="38.159.13.84"/>
        </slice>
        <from usec="0" sec="1533705174"/>
        <to usec="0" sec="1533705177"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="60.128.42.164" dst_ip="163.213.114.149" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1533704894"/>
        <to usec="0" sec="1533704895"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.24.219.161" dst_ip="163.213.7.69" src_port="443" dst_port="56873" proto="tcp"/>
        </slice>
        <from usec="0" sec="1533704435"/>
        <to usec="0" sec="1533704437"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="122.50.26.176" dst_ip="202.62.145.188" src_port="443" dst_port="24512" proto="tcp"/>
        </slice>
        <from usec="0" sec="1533704739"/>
        <to usec="0" sec="1533704740"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="103.57.211.52" dst_ip="163.213.251.126" src_port="443" dst_port="61328" proto="tcp"/>
        </slice>
        <from usec="0" sec="1533705272"/>
        <to usec="0" sec="1533705274"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="172.34.93.50" dst_ip="163.213.86.157" src_port="443" dst_port="4139" proto="tcp"/>
        </slice>
        <from usec="0" sec="1533704713"/>
        <to usec="0" sec="1533704730"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.161.115.43"/>
        </slice>
        <from usec="0" sec="1533704949"/>
        <to usec="0" sec="1533704951"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="182.105.160.130" dst_ip="163.213.250.3" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1533705198"/>
        <to usec="0" sec="1533705200"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.213.114.85" dst_ip="104.205.33.253" src_port="59722" dst_port="52284" proto="udp"/>
        </slice>
        <from usec="0" sec="1533705007"/>
        <to usec="0" sec="1533705200"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.183.234.88" dst_ip="163.213.180.238" src_port="30837" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1533704687"/>
        <to usec="0" sec="1533704689"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="74.234.27.168" dst_ip="163.213.3.26" src_port="443" dst_port="51330" proto="udp"/>
        </slice>
        <from usec="0" sec="1533704562"/>
        <to usec="0" sec="1533704953"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.224.54.74" dst_ip="163.213.251.209" src_port="80" dst_port="49795" proto="tcp"/>
        </slice>
        <from usec="0" sec="1533704625"/>
        <to usec="0" sec="1533704626"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.213.9.77" dst_ip="38.159.13.94" src_port="60059" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1533704680"/>
        <to usec="0" sec="1533704689"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="8.164.17.182" dst_ip="133.141.190.141" src_port="80" dst_port="58339" proto="tcp"/>
        </slice>
        <from usec="0" sec="1533704916"/>
        <to usec="0" sec="1533704918"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="216.54.197.150" dst_ip="163.213.125.47" src_port="80" dst_port="49997" proto="tcp"/>
        </slice>
        <from usec="0" sec="1533704470"/>
        <to usec="0" sec="1533704471"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="183.241.30.4" dst_ip="163.213.249.17" src_port="443" dst_port="62808" proto="tcp"/>
        </slice>
        <from usec="0" sec="1533704507"/>
        <to usec="0" sec="1533704508"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="45.23.100.47" dst_ip="163.213.101.143" src_port="443" dst_port="2145" proto="tcp"/>
        </slice>
        <from usec="0" sec="1533704546"/>
        <to usec="0" sec="1533704547"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.213.115.203"/>
        </slice>
        <from usec="0" sec="1533704954"/>
        <to usec="0" sec="1533704957"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.161.124.21" dst_ip="65.147.190.146" src_port="49642" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1533704487"/>
        <to usec="0" sec="1533704489"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.213.28.203" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1533704687"/>
        <to usec="0" sec="1533705233"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,503,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.213.114.124"/>
        </slice>
        <from usec="0" sec="1533705003"/>
        <to usec="0" sec="1533705006"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="115.102.241.230" dst_ip="163.213.124.151" src_port="80" dst_port="51276" proto="tcp"/>
        </slice>
        <from usec="0" sec="1533704899"/>
        <to usec="0" sec="1533704902"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.106.122.154"/>
        </slice>
        <from usec="0" sec="1533704464"/>
        <to usec="0" sec="1533704466"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.213.100.161" dst_ip="202.18.122.85" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1533704954"/>
        <to usec="0" sec="1533704955"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,999,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="58.184.104.156" dst_ip="163.213.248.42"/>
            <filter src_ip="58.184.104.156" dst_ip="203.161.127.14"/>
            <filter src_ip="58.184.104.156" dst_port="123"/>
            <filter dst_ip="203.161.127.14" dst_port="123"/>
            <filter src_ip="68.40.154.202" dst_ip="163.213.248.42" dst_port="123"/>
        </slice>
        <from usec="0" sec="1533704453"/>
        <to usec="0" sec="1533705233"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.231.74.200" src_port="5106"/>
        </slice>
        <from usec="0" sec="1533704488"/>
        <to usec="0" sec="1533705233"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.161.119.119"/>
        </slice>
        <from usec="0" sec="1533704898"/>
        <to usec="0" sec="1533704906"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="203.161.115.43"/>
        </slice>
        <from usec="0" sec="1533704768"/>
        <to usec="0" sec="1533704770"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.106.205.82"/>
        </slice>
        <from usec="0" sec="1533704453"/>
        <to usec="0" sec="1533704997"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="206.77.61.129" dst_ip="203.161.116.89" dst_port="443"/>
            <filter src_ip="172.224.235.166" dst_ip="203.161.116.89" dst_port="443"/>
        </slice>
        <from usec="0" sec="1533704538"/>
        <to usec="0" sec="1533705000"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="52.118.86.88" dst_port="161"/>
        </slice>
        <from usec="0" sec="1533704436"/>
        <to usec="0" sec="1533704891"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.213.100.172"/>
        </slice>
        <from usec="0" sec="1533704662"/>
        <to usec="0" sec="1533705006"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,502,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="121.157.30.251"/>
        </slice>
        <from usec="0" sec="1533704916"/>
        <to usec="0" sec="1533704918"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="203.161.115.43"/>
        </slice>
        <from usec="0" sec="1533705191"/>
        <to usec="0" sec="1533705193"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="109.130.104.86"/>
        </slice>
        <from usec="0" sec="1533704538"/>
        <to usec="0" sec="1533704540"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.213.215.150"/>
        </slice>
        <from usec="0" sec="1533704889"/>
        <to usec="0" sec="1533704891"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,004,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="181.196.229.34"/>
        </slice>
        <from usec="0" sec="1533704890"/>
        <to usec="0" sec="1533704893"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,004,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="24.250.173.52"/>
        </slice>
        <from usec="0" sec="1533704680"/>
        <to usec="0" sec="1533704683"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="196.212.43.50"/>
        </slice>
        <from usec="0" sec="1533704781"/>
        <to usec="0" sec="1533704784"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.213.219.88"/>
        </slice>
        <from usec="0" sec="1533704954"/>
        <to usec="0" sec="1533704957"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="188.119.220.86"/>
        </slice>
        <from usec="0" sec="1533704890"/>
        <to usec="0" sec="1533704893"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="111.170.215.79"/>
        </slice>
        <from usec="0" sec="1533704898"/>
        <to usec="0" sec="1533704900"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.213.249.184"/>
        </slice>
        <from usec="0" sec="1533704435"/>
        <to usec="0" sec="1533704437"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.106.93.71"/>
        </slice>
        <from usec="0" sec="1533704680"/>
        <to usec="0" sec="1533704683"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="221.195.211.235"/>
        </slice>
        <from usec="0" sec="1533704781"/>
        <to usec="0" sec="1533704784"/>
    </anomaly>
    <anomaly type="notice" value="0.558955,1.0692,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.213.100.172" dst_port="53"/>
        </slice>
        <from usec="0" sec="1533704453"/>
        <to usec="0" sec="1533704957"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="104.137.142.218"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="107.176.224.139"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="108.183.48.28"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="114.54.9.242"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="118.194.114.47"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="133.106.3.234"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="133.106.110.165" dst_ip="23.1.136.255" src_port="5900"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="181.216.40.205"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,010,0 0 0 0 0 0 0 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="142.170.93.42"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="151.250.244.32"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="163.213.248.211"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="163.213.124.143"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="163.213.125.26"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="163.213.125.74"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.213.180.238" src_port="80"/>
            <filter src_ip="163.213.180.238" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="167.186.248.119"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="172.244.239.83"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.554696,1.01949,504,1 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="185.39.45.222" dst_ip="163.213.100.92" src_port="443" dst_port="65477"/>
            <filter src_ip="185.39.45.222" dst_ip="163.213.100.92" src_port="443" dst_port="65476"/>
            <filter src_ip="185.39.45.222" dst_ip="163.213.100.92" src_port="443" dst_port="65459"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,010,0 0 0 0 0 0 0 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.40.94.136" src_port="47020" dst_port="3391"/>
            <filter src_ip="185.40.94.136" src_port="47020" dst_port="3390"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="192.190.101.55"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="192.217.170.126"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="193.180.115.176"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="202.24.219.145"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="203.161.127.142" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,020,0 0 0 0 0 0 0 0 0 1 0 0,icmp_error">
        <slice>
            <filter src_ip="203.161.126.52" dst_port="53"/>
            <filter src_ip="203.161.126.52"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="203.161.121.55"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="208.157.212.35"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="216.64.161.234" src_port="22" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="222.190.7.8"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="23.174.221.28"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="37.88.126.176"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="78.180.52.40"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,010,0 0 0 0 0 0 0 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="51.9.29.66" src_port="44340" dst_port="8080"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,503,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="216.54.197.222"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="52.114.225.93" dst_port="82"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="59.170.35.151"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,504,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="5.14.124.133"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.135.32.216" src_port="445" dst_port="445"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="74.234.27.171"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="91.61.29.149"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="109.153.21.58"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.554696,1.01949,504,1 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="163.213.125.61" dst_ip="108.183.48.28" dst_port="443"/>
            <filter src_ip="163.213.100.204" dst_ip="108.183.48.28" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="121.209.146.227"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="146.127.197.233"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="149.166.213.144"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="150.180.184.72" dst_port="27657"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,504,0 0 0 0 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter src_ip="104.228.223.62" dst_ip="163.213.102.50" src_port="443"/>
            <filter src_ip="104.228.222.65" dst_ip="163.213.102.50" src_port="443"/>
            <filter src_ip="202.18.122.124" dst_ip="163.213.102.50" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.213.1.119" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="80.29.188.11" dst_ip="163.213.248.42" src_port="993"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="171.60.132.47" src_port="3389"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="176.213.79.91"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,011,0 0 0 0 0 0 0 0 0 1 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="181.216.40.166" dst_port="49856"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,011,0 0 0 0 0 0 0 0 0 1 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="181.216.40.162" dst_port="50026"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,999,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="203.161.107.240" src_port="8333"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,999,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="203.161.120.55" dst_ip="5.90.224.11" src_port="3389"/>
            <filter src_ip="203.161.120.55" dst_ip="185.99.77.113" src_port="3389"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,020,0 0 0 0 0 0 0 0 0 1 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="185.136.14.91" src_port="22"/>
            <filter dst_ip="185.136.14.91"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="151.173.123.26"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="195.50.226.232"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.554696,1.01949,999,1 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.161.107.240" dst_port="25"/>
            <filter src_ip="198.82.234.76" dst_ip="203.161.107.240" dst_port="587"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="208.135.216.147"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="212.232.145.113"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,502,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="221.195.208.16" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="34.0.158.120"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="163.213.79.6" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="54.186.159.253"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,011,0 0 0 0 0 0 0 0 0 1 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="172.34.153.222" dst_port="52860"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.461852,1.03687,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="67.26.89.254"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="104.178.177.237" dst_ip="163.213.248.253" src_port="443" dst_port="55033"/>
            <filter src_ip="104.178.177.237" dst_ip="163.213.248.253" src_port="443" dst_port="55032"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,010,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="123.111.129.24" src_port="55643" dst_port="23"/>
            <filter src_ip="123.111.129.24" src_port="55643" dst_port="2323"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="124.127.49.177" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,002,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter dst_ip="133.141.150.191" dst_port="137"/>
            <filter src_ip="124.70.237.13" dst_ip="133.141.153.0" dst_port="138"/>
            <filter src_ip="124.70.237.13" dst_ip="133.141.153.0" dst_port="137"/>
            <filter src_ip="124.70.237.13" dst_ip="133.141.150.191" dst_port="138"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,020,0 0 0 0 0 0 0 0 0 1 1 0,ttl_error">
        <slice>
            <filter src_ip="133.106.111.55"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,010,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="142.170.94.66" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="163.213.251.212" dst_ip="40.101.144.110" dst_port="443"/>
            <filter src_ip="163.213.251.212" dst_ip="52.95.180.74" dst_port="443"/>
            <filter src_ip="163.213.251.212" dst_ip="40.100.43.130" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="163.213.101.139" dst_ip="52.102.208.174" dst_port="443"/>
            <filter src_ip="163.213.101.139" dst_ip="8.21.112.25" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="163.213.79.48" dst_ip="13.2.26.186" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="172.244.29.241" dst_port="465"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="172.245.201.43" dst_port="9600"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="176.230.191.202" src_port="42484" dst_port="23"/>
            <filter src_ip="176.230.191.202" src_port="24117" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,010,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="14.52.210.220" src_port="51622"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,999,0 0 0 0 0 0 0 0 0 1 1 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.237.109.168" dst_port="5683"/>
            <filter src_ip="185.237.109.168" dst_port="27960"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,999,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="203.161.127.44" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="216.64.161.250" src_port="22" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="217.191.174.178" src_port="55283" dst_port="2200"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="218.147.118.87" src_port="55811" dst_port="10022"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="126.184.231.152" src_port="55811" dst_port="10022"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="23.163.36.100" dst_ip="163.213.249.103" src_port="443" dst_port="59402"/>
            <filter src_ip="23.163.36.100" dst_ip="163.213.249.103" src_port="443" dst_port="49187"/>
            <filter src_ip="23.163.36.100" dst_ip="163.213.249.103" src_port="443" dst_port="34066"/>
            <filter src_ip="23.163.36.100" dst_ip="163.213.249.103" src_port="443" dst_port="34065"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="35.1.96.238" dst_ip="163.213.248.10" src_port="5502" dst_port="58372"/>
            <filter src_ip="35.1.96.238" dst_ip="163.213.248.10" src_port="5501" dst_port="58361"/>
            <filter src_ip="35.1.96.238" dst_ip="163.213.248.10"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,503,0 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="13.65.84.146" dst_port="80"/>
            <filter dst_ip="203.161.127.54" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="52.221.12.189" dst_port="4567"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,010,0 0 0 0 0 0 0 0 0 1 1 0,ptpDoSSYN">
        <slice>
            <filter src_ip="203.161.115.43" dst_ip="203.161.67.228" src_port="8403" dst_port="41195"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="74.234.19.218" dst_ip="202.62.145.255" dst_port="443"/>
            <filter src_ip="74.234.19.218" dst_ip="202.62.145.255" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="89.187.175.110" dst_ip="203.161.120.158" src_port="8333" dst_port="46728"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,502,0 0 0 0 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter dst_ip="133.123.126.254" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,999,0 0 0 0 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter src_ip="203.87.83.1" dst_ip="149.100.76.242" src_port="41421" dst_port="873"/>
            <filter src_ip="203.87.83.2" dst_ip="149.100.76.242" src_port="26893" dst_port="873"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="202.63.4.88" dst_ip="163.213.248.211" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.213.102.71" src_port="80"/>
            <filter dst_ip="163.213.102.71" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,503,0 0 0 0 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.213.19.44" src_port="443"/>
            <filter dst_ip="163.213.19.44" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,011,0 0 0 0 0 0 0 0 0 1 1 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="181.216.40.205" src_port="3396" dst_port="41311"/>
            <filter dst_ip="181.216.40.205" src_port="3212" dst_port="41311"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,011,0 0 0 0 0 0 0 0 0 1 1 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="181.216.40.150" dst_port="50151"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="133.106.2.141" dst_ip="185.220.181.21" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,999,0 0 0 0 0 0 0 0 0 1 1 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.161.107.240" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="133.106.103.120" dst_ip="210.4.200.254" src_port="48858" dst_port="56072"/>
            <filter src_ip="133.106.103.120" dst_ip="210.4.200.254" src_port="48851" dst_port="52149"/>
            <filter src_ip="133.106.103.120" dst_ip="210.4.200.254" src_port="48850" dst_port="52148"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,011,0 0 0 0 0 0 0 0 0 1 1 0,heavy_hitter">
        <slice>
            <filter src_ip="203.161.124.27" dst_ip="212.148.1.87" dst_port="44879"/>
            <filter src_ip="203.161.124.27" dst_ip="212.148.1.87" dst_port="44269"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="23.221.250.200" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,020,0 0 0 0 0 0 0 0 0 1 1 0,sptpDoSIC">
        <slice>
            <filter src_ip="203.161.10.86" dst_ip="37.240.193.161"/>
            <filter src_ip="202.62.191.114" dst_ip="37.240.193.161"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,020,0 0 0 0 0 0 0 0 0 1 1 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="162.207.135.52" dst_port="54234"/>
            <filter dst_ip="162.207.135.52"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,503,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="163.213.3.28" dst_ip="67.26.83.254" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.615638,1.00642,999,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="203.161.120.158" dst_ip="88.162.114.155" src_port="8333" dst_port="47284"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
