<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="notice" value="0.544664,1.12282,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.197.178.1" dst_ip="97.185.58.63" src_port="4500" dst_port="4500" proto="udp"/>
        </slice>
        <from usec="0" sec="1536469466"/>
        <to usec="0" sec="1536469504"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.189.157.235" dst_ip="87.132.35.31" src_port="60012" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469201"/>
        <to usec="0" sec="1536469782"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="45.126.163.155" dst_ip="163.189.156.14" src_port="1701" dst_port="1701" proto="udp"/>
        </slice>
        <from usec="0" sec="1536469253"/>
        <to usec="0" sec="1536469725"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.189.132.55" dst_ip="133.54.241.83" src_port="58785" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469276"/>
        <to usec="0" sec="1536469277"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.197.201.44"/>
        </slice>
        <from usec="0" sec="1536469304"/>
        <to usec="0" sec="1536469311"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="116.71.27.49"/>
        </slice>
        <from usec="0" sec="1536469619"/>
        <to usec="0" sec="1536469621"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.189.156.73" dst_ip="152.81.53.116" src_port="59152" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469389"/>
        <to usec="0" sec="1536469868"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.189.132.125" dst_ip="42.115.210.81" src_port="56133" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469209"/>
        <to usec="0" sec="1536469211"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="46.26.55.205" dst_ip="203.114.128.145" src_port="13718" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469259"/>
        <to usec="0" sec="1536469620"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="46.26.55.206" dst_ip="163.189.11.102" src_port="46578" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469314"/>
        <to usec="0" sec="1536469431"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.11.38.52" dst_ip="188.65.65.199" src_port="62192" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469208"/>
        <to usec="0" sec="1536469566"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="46.26.55.200" dst_ip="203.114.128.145" src_port="35088" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469277"/>
        <to usec="0" sec="1536469281"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.189.158.7" dst_ip="185.195.223.29" src_port="54707" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469248"/>
        <to usec="0" sec="1536469358"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.183.53.101" dst_ip="202.2.205.194" src_port="64445" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469428"/>
        <to usec="0" sec="1536469429"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.189.156.40" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469299"/>
        <to usec="0" sec="1536469386"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="126.10.20.22" dst_ip="202.11.36.58" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469292"/>
        <to usec="0" sec="1536469385"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.189.156.60"/>
        </slice>
        <from usec="0" sec="1536469201"/>
        <to usec="0" sec="1536469203"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.213.220.130" dst_ip="203.114.133.247" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469268"/>
        <to usec="0" sec="1536469270"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.189.156.59" dst_ip="163.189.232.188" src_port="80" dst_port="64476" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469479"/>
        <to usec="0" sec="1536469481"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="74.125.116.136" dst_ip="163.189.157.1" src_port="443" dst_port="54145" proto="udp"/>
        </slice>
        <from usec="0" sec="1536469216"/>
        <to usec="0" sec="1536469233"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="23.33.157.134" dst_ip="163.189.132.232" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469857"/>
        <to usec="0" sec="1536469858"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="23.36.24.131" dst_ip="163.189.156.151" src_port="443" dst_port="34070" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469209"/>
        <to usec="0" sec="1536469238"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.189.156.145" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469216"/>
        <to usec="0" sec="1536469779"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="151.172.149.107" dst_ip="163.189.157.231" src_port="443" dst_port="49462" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469947"/>
        <to usec="0" sec="1536469949"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.189.156.149" dst_ip="185.111.170.104" src_port="50137" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469244"/>
        <to usec="0" sec="1536469985"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="185.111.170.104" dst_ip="163.189.156.149" src_port="443" dst_port="50137" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469407"/>
        <to usec="0" sec="1536469845"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.189.133.103" dst_ip="52.147.132.12" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469401"/>
        <to usec="0" sec="1536470023"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="126.11.29.183" dst_ip="202.11.36.43" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469430"/>
        <to usec="0" sec="1536469431"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="119.195.217.161" dst_ip="203.114.136.0" dst_port="123" proto="udp"/>
        </slice>
        <from usec="0" sec="1536469227"/>
        <to usec="0" sec="1536469427"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="49.144.26.243" dst_ip="163.189.8.249" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469618"/>
        <to usec="0" sec="1536469622"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.114.133.247" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469355"/>
        <to usec="0" sec="1536469372"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="31.31.194.43" dst_ip="88.156.225.194" src_port="60007" dst_port="8333" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469268"/>
        <to usec="0" sec="1536469404"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.189.215.51" dst_ip="35.100.248.93" src_port="56845" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469260"/>
        <to usec="0" sec="1536469262"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="60.141.228.241" dst_ip="163.189.157.134" src_port="5555" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469382"/>
        <to usec="0" sec="1536470097"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.114.136.0" dst_ip="203.114.136.0" proto="udp"/>
        </slice>
        <from usec="0" sec="1536469200"/>
        <to usec="0" sec="1536469838"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.189.12.128"/>
        </slice>
        <from usec="0" sec="1536469264"/>
        <to usec="0" sec="1536469265"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.189.156.36" dst_ip="163.189.156.128" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469406"/>
        <to usec="0" sec="1536469853"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="58.68.205.73" dst_ip="185.51.174.136" dst_port="53" proto="udp"/>
        </slice>
        <from usec="0" sec="1536469413"/>
        <to usec="0" sec="1536469434"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.197.17.115"/>
        </slice>
        <from usec="0" sec="1536469314"/>
        <to usec="0" sec="1536469315"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.189.157.181" dst_ip="187.139.45.96" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469300"/>
        <to usec="0" sec="1536469308"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="118.14.123.101" dst_ip="202.2.205.203" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469306"/>
        <to usec="0" sec="1536469307"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,020,1 0 0 0 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="133.197.8.123"/>
        </slice>
        <from usec="0" sec="1536469914"/>
        <to usec="0" sec="1536469931"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="46.237.54.127" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469461"/>
        <to usec="0" sec="1536469564"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.189.156.100"/>
        </slice>
        <from usec="0" sec="1536469242"/>
        <to usec="0" sec="1536469373"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="77.182.130.133" dst_port="445" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469269"/>
        <to usec="0" sec="1536469274"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.81.178.208"/>
        </slice>
        <from usec="0" sec="1536469675"/>
        <to usec="0" sec="1536469677"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.2.229.251"/>
        </slice>
        <from usec="0" sec="1536469752"/>
        <to usec="0" sec="1536469754"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.197.164.120"/>
        </slice>
        <from usec="0" sec="1536469947"/>
        <to usec="0" sec="1536469949"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.197.15.170"/>
        </slice>
        <from usec="0" sec="1536469318"/>
        <to usec="0" sec="1536469320"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="46.26.55.208" dst_ip="163.189.11.102" src_port="45354" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1536469326"/>
        <to usec="0" sec="1536469327"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="60.157.107.117"/>
        </slice>
        <from usec="0" sec="1536469435"/>
        <to usec="0" sec="1536469436"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.11.229.150"/>
        </slice>
        <from usec="0" sec="1536469291"/>
        <to usec="0" sec="1536469293"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.189.156.151"/>
        </slice>
        <from usec="0" sec="1536469291"/>
        <to usec="0" sec="1536469293"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.189.204.162"/>
        </slice>
        <from usec="0" sec="1536469287"/>
        <to usec="0" sec="1536469288"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.189.233.48"/>
        </slice>
        <from usec="0" sec="1536469428"/>
        <to usec="0" sec="1536469429"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="52.21.142.92"/>
        </slice>
        <from usec="0" sec="1536469242"/>
        <to usec="0" sec="1536469244"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="34.147.4.33"/>
        </slice>
        <from usec="0" sec="1536469396"/>
        <to usec="0" sec="1536469397"/>
    </anomaly>
    <anomaly type="notice" value="0.544664,1.12282,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="52.21.223.2"/>
        </slice>
        <from usec="0" sec="1536469424"/>
        <to usec="0" sec="1536469425"/>
    </anomaly>
    <anomaly type="notice" value="0.724434,1.15481,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="71.99.33.102"/>
        </slice>
        <from usec="0" sec="1536469207"/>
        <to usec="0" sec="1536469307"/>
    </anomaly>
    <anomaly type="notice" value="0.724434,1.15481,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.189.183.196"/>
        </slice>
        <from usec="0" sec="1536469200"/>
        <to usec="0" sec="1536469398"/>
    </anomaly>
    <anomaly type="notice" value="0.724434,1.15481,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="86.159.203.133"/>
        </slice>
        <from usec="0" sec="1536469200"/>
        <to usec="0" sec="1536469486"/>
    </anomaly>
    <anomaly type="notice" value="0.724434,1.15481,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="219.81.27.139"/>
        </slice>
        <from usec="0" sec="1536469226"/>
        <to usec="0" sec="1536469484"/>
    </anomaly>
    <anomaly type="notice" value="0.724434,1.15481,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="173.159.91.12"/>
        </slice>
        <from usec="0" sec="1536469391"/>
        <to usec="0" sec="1536469418"/>
    </anomaly>
    <anomaly type="notice" value="0.724434,1.15481,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="114.239.56.181"/>
        </slice>
        <from usec="0" sec="1536469202"/>
        <to usec="0" sec="1536469667"/>
    </anomaly>
    <anomaly type="notice" value="0.724434,1.15481,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="62.49.243.213"/>
        </slice>
        <from usec="0" sec="1536469547"/>
        <to usec="0" sec="1536469561"/>
    </anomaly>
    <anomaly type="notice" value="0.724434,1.15481,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="31.173.228.242"/>
        </slice>
        <from usec="0" sec="1536469201"/>
        <to usec="0" sec="1536469756"/>
    </anomaly>
    <anomaly type="notice" value="0.724434,1.15481,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1536469200"/>
        <to usec="0" sec="1536470028"/>
    </anomaly>
    <anomaly type="notice" value="0.724434,1.15481,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1536469200"/>
        <to usec="0" sec="1536470028"/>
    </anomaly>
    <anomaly type="notice" value="0.724434,1.15481,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.189.50.18" src_port="53"/>
        </slice>
        <from usec="0" sec="1536469201"/>
        <to usec="0" sec="1536469754"/>
    </anomaly>
    <anomaly type="notice" value="0.724434,1.15481,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="186.231.150.97"/>
        </slice>
        <from usec="0" sec="1536469206"/>
        <to usec="0" sec="1536469749"/>
    </anomaly>
    <anomaly type="notice" value="0.724434,1.15481,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.189.99.86"/>
        </slice>
        <from usec="0" sec="1536469553"/>
        <to usec="0" sec="1536469724"/>
    </anomaly>
    <anomaly type="notice" value="0.724434,1.15481,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="69.160.133.81"/>
        </slice>
        <from usec="0" sec="1536469574"/>
        <to usec="0" sec="1536469627"/>
    </anomaly>
    <anomaly type="notice" value="0.724434,1.15481,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="178.22.47.220"/>
        </slice>
        <from usec="0" sec="1536469202"/>
        <to usec="0" sec="1536469842"/>
    </anomaly>
    <anomaly type="notice" value="0.724434,1.15481,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="34.151.244.44"/>
        </slice>
        <from usec="0" sec="1536469200"/>
        <to usec="0" sec="1536469938"/>
    </anomaly>
    <anomaly type="notice" value="0.724434,1.15481,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="188.191.235.244"/>
        </slice>
        <from usec="0" sec="1536469200"/>
        <to usec="0" sec="1536469938"/>
    </anomaly>
    <anomaly type="notice" value="0.724434,1.15481,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="78.147.59.210"/>
        </slice>
        <from usec="0" sec="1536469200"/>
        <to usec="0" sec="1536469938"/>
    </anomaly>
    <anomaly type="notice" value="0.724434,1.15481,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="188.14.87.153"/>
        </slice>
        <from usec="0" sec="1536469200"/>
        <to usec="0" sec="1536469938"/>
    </anomaly>
    <anomaly type="notice" value="0.724434,1.15481,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="78.167.248.119"/>
        </slice>
        <from usec="0" sec="1536469203"/>
        <to usec="0" sec="1536469933"/>
    </anomaly>
    <anomaly type="notice" value="0.724434,1.15481,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="185.178.215.113"/>
        </slice>
        <from usec="0" sec="1536469206"/>
        <to usec="0" sec="1536469934"/>
    </anomaly>
    <anomaly type="notice" value="0.724434,1.15481,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="122.147.221.169"/>
        </slice>
        <from usec="0" sec="1536469214"/>
        <to usec="0" sec="1536469933"/>
    </anomaly>
    <anomaly type="notice" value="0.724434,1.15481,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="47.120.216.203"/>
        </slice>
        <from usec="0" sec="1536469200"/>
        <to usec="0" sec="1536470028"/>
    </anomaly>
    <anomaly type="notice" value="0.724434,1.15481,011,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.114.130.12" src_port="3124"/>
        </slice>
        <from usec="0" sec="1536469200"/>
        <to usec="0" sec="1536470028"/>
    </anomaly>
    <anomaly type="notice" value="0.724434,1.15481,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="61.94.18.247" src_port="19579"/>
            <filter src_ip="61.94.18.247" src_port="19323"/>
            <filter src_ip="61.94.18.247" src_port="18811"/>
            <filter src_ip="61.94.18.247" dst_port="23"/>
            <filter src_port="19579" dst_port="23"/>
            <filter src_port="19323" dst_port="23"/>
            <filter src_port="18811" dst_port="23"/>
        </slice>
        <from usec="0" sec="1536469201"/>
        <to usec="0" sec="1536470025"/>
    </anomaly>
    <anomaly type="notice" value="0.724434,1.15481,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="124.79.254.164"/>
        </slice>
        <from usec="0" sec="1536469204"/>
        <to usec="0" sec="1536470028"/>
    </anomaly>
    <anomaly type="notice" value="0.724434,1.15481,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="222.212.40.178"/>
        </slice>
        <from usec="0" sec="1536469204"/>
        <to usec="0" sec="1536470026"/>
    </anomaly>
    <anomaly type="notice" value="0.724434,1.15481,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.247.157.137"/>
        </slice>
        <from usec="0" sec="1536469234"/>
        <to usec="0" sec="1536469852"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,010,0 0 0 0 0 0 0 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="104.255.188.116" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="106.78.131.193"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="114.239.234.86"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="118.98.194.80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="120.20.189.99"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="121.126.82.145"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543454,1.07496,999,1 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="74.125.122.137" src_port="25"/>
            <filter src_ip="74.125.122.137" dst_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543454,1.07496,504,1 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="133.197.164.50" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="133.197.162.254" dst_ip="212.92.163.39" src_port="3389"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="133.197.202.233"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.197.38.245" dst_ip="138.197.251.24" dst_port="80"/>
            <filter src_ip="133.197.38.245" dst_ip="163.189.158.70" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543454,1.07496,504,1 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="133.197.42.7" dst_ip="192.35.235.212" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="139.225.67.181"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="139.225.125.168"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="142.93.81.154"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="162.255.232.209"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="163.189.158.34"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.723525,1.10833,999,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="163.189.29.231" src_port="30303"/>
            <filter src_ip="163.189.29.231" dst_port="30303"/>
            <filter src_port="30303" dst_port="30303"/>
            <filter src_ip="163.189.29.231"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="17.123.12.54"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="173.168.16.228"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="178.22.209.11"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="184.217.72.149" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="185.228.179.40"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="188.65.65.199"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="189.67.76.6"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="190.33.61.20"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="203.114.131.149" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,011,0 0 0 0 0 0 0 0 0 1 0 0,point_to_point">
        <slice>
            <filter src_ip="203.114.128.255" dst_ip="45.160.39.33" dst_port="34404"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,502,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="203.114.136.54" dst_ip="58.68.92.104" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,502,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="203.114.137.182" dst_ip="58.68.92.104" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.723525,1.10833,020,0 0 0 1 0 0 0 0 0 1 0 0,ttl_error">
        <slice>
            <filter src_ip="203.114.140.237"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="203.114.141.130"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,502,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="203.114.141.157" dst_ip="58.68.92.104" src_port="22"/>
            <filter src_ip="203.114.141.157" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="205.122.184.56" dst_port="9001"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="23.132.73.7"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="23.129.25.192"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="37.219.42.36"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="4.220.253.202"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="47.120.216.203"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="47.184.194.225"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="51.217.17.213" src_port="48409"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="52.225.99.58"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="60.41.34.173" dst_port="30664"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="62.52.116.214"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="66.168.121.23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="69.116.50.27"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.199.246.140"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.199.246.133" src_port="587" dst_port="587"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="80.178.127.79"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="82.189.101.249" src_port="29011"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="82.189.101.248" src_port="29011"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="84.236.48.57"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="89.94.106.46"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="89.120.200.128" src_port="29011"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="89.210.173.184"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="91.197.100.128"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,011,0 0 0 0 0 0 0 0 0 1 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="109.128.10.148" src_port="3397" dst_port="56501"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="111.94.99.209"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,502,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="202.11.32.86" dst_ip="118.190.233.13" src_port="22"/>
            <filter src_ip="202.11.32.87" dst_ip="118.190.233.13" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.212.133.225" src_port="1863" dst_port="18183"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,999,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.93.187.53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="150.203.68.17" dst_port="34579"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543454,1.07496,504,1 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="163.189.157.231" dst_ip="151.172.149.107" src_port="49463" dst_port="443"/>
            <filter src_ip="163.189.157.231" dst_ip="151.172.149.107" src_port="49462" dst_port="443"/>
            <filter src_ip="163.189.157.231" dst_ip="151.172.149.107" src_port="49430" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,011,0 0 0 0 0 0 0 0 0 1 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="159.162.204.121" src_port="5905" dst_port="44577"/>
            <filter dst_ip="159.162.204.121" src_port="5903" dst_port="44577"/>
            <filter dst_ip="159.162.204.121" src_port="5904" dst_port="44577"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="162.255.232.209"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="192.151.173.131" dst_ip="163.189.140.109" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="163.189.157.238" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,011,0 0 0 0 0 0 0 0 0 1 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="176.119.7.81" src_port="8734" dst_port="43570"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="133.197.13.91" src_port="993"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="185.99.50.173"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,502,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="185.29.146.255"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,011,0 0 0 0 0 0 0 0 0 1 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="185.11.229.150" src_port="81"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.723525,1.10833,504,0 0 0 1 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="163.189.156.55" dst_ip="188.65.67.195" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="192.141.39.73"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,502,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="61.120.150.138" dst_ip="202.11.34.70" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="202.11.32.80" dst_port="993"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="205.36.255.189"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="206.121.6.118"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="212.92.168.110"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543454,1.07496,504,1 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="163.189.157.99" dst_ip="64.193.98.231" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,011,0 0 0 0 0 0 0 0 0 1 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="31.211.115.154" dst_port="49894"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="35.73.110.35"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543454,1.07496,504,1 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="163.189.157.59" dst_ip="37.219.42.36" src_port="60368" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,011,0 0 0 0 0 0 0 0 0 1 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="51.217.17.223" dst_port="48519"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,011,0 0 0 0 0 0 0 0 0 1 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="5.3.144.89" dst_port="46446"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,504,0 0 0 0 0 0 0 0 0 1 0 0,point_to_point">
        <slice>
            <filter dst_ip="163.189.156.241"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,502,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="54.130.34.53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.458875,1.10001,011,0 0 0 0 0 0 0 0 0 1 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="80.178.100.197" src_port="81"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="125.84.192.137" dst_ip="163.189.156.107" src_port="53311" dst_port="49537"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="133.197.71.20" dst_ip="149.30.50.187"/>
            <filter src_ip="133.197.71.20" dst_port="443"/>
            <filter dst_ip="149.30.50.187" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,999,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="171.180.58.233"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,999,0 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter dst_ip="213.17.157.142" src_port="3389"/>
            <filter src_ip="133.197.105.210" dst_ip="185.99.50.104" src_port="3389"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="139.225.121.18" dst_port="8090"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,999,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="203.114.133.249" dst_ip="203.137.23.137" src_port="873" dst_port="51483"/>
            <filter src_ip="203.114.133.249" dst_ip="163.189.234.13" src_port="873" dst_port="46837"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="163.189.157.244" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,999,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="163.189.5.201" src_port="60255" dst_port="53"/>
            <filter src_ip="163.189.5.201" src_port="8994" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,010,0 0 0 0 0 0 0 0 0 1 1 0,ntscSYN">
        <slice>
            <filter src_ip="173.76.40.164" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,010,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="185.102.126.229" src_port="53737"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,010,0 0 0 0 0 0 0 0 0 1 1 0,ntscSYN">
        <slice>
            <filter src_ip="185.50.248.109" src_port="46839" dst_port="52007"/>
            <filter src_ip="185.50.248.109" src_port="46839" dst_port="52009"/>
            <filter src_ip="185.50.248.109" src_port="46839" dst_port="52008"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="186.36.24.76" dst_ip="203.114.143.0" src_port="39267" dst_port="8333"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,503,0 0 0 0 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.114.142.151" src_port="80"/>
            <filter dst_ip="203.114.142.151" dst_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,504,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="188.65.67.195" dst_ip="163.189.156.55" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,504,0 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="72.246.222.62" dst_ip="163.189.157.136"/>
            <filter src_ip="72.246.222.62" src_port="443"/>
            <filter dst_ip="163.189.157.136" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="74.125.197.59" dst_ip="202.11.36.111" src_port="443"/>
            <filter src_ip="74.125.197.59" dst_ip="163.189.116.234" src_port="443"/>
            <filter src_ip="74.125.197.59" dst_ip="163.189.237.214" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,010,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="92.245.88.212" src_port="45905"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,010,0 0 0 0 0 0 0 0 0 1 1 0,ntscSYN">
        <slice>
            <filter src_ip="92.249.253.75" src_port="59312" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="163.189.156.20" dst_ip="103.97.49.119" src_port="50869" dst_port="8889"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,011,0 0 0 0 0 0 0 0 0 1 1 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="107.160.12.196" src_port="1080"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="88.156.225.194" dst_ip="115.166.243.77" src_port="8333" dst_port="35476"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,011,0 0 0 0 0 0 0 0 0 1 1 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="146.254.33.247" dst_port="58435"/>
            <filter dst_ip="146.254.33.247" src_port="21020" dst_port="47215"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,999,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.189.12.148" src_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="203.114.147.239" dst_ip="199.45.110.119" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="203.114.141.37" dst_ip="201.137.60.16" src_port="10001" dst_port="8080"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,503,0 0 0 0 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="202.36.157.157" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,011,0 0 0 0 0 0 0 0 0 1 1 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="51.217.17.236" dst_port="57091"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="163.189.157.185" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="163.189.29.221" dst_ip="52.61.161.70" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,502,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="61.120.150.133" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,503,0 0 0 0 0 0 0 0 0 1 1 0,mptplaHTTP">
        <slice>
            <filter src_ip="133.197.17.252" dst_ip="73.60.191.158" src_port="1900" dst_port="80"/>
            <filter src_ip="133.197.83.242" dst_ip="73.60.191.158" src_port="1900" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.666439,1.07754,999,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="88.156.225.194" dst_ip="89.102.101.90" src_port="8333" dst_port="50780"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
