<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.218.98.220" dst_ip="54.214.234.241" src_port="50375" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539147836"/>
        <to usec="0" sec="1539148275"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="31.242.214.17" dst_ip="163.218.57.107" src_port="443" dst_port="52225" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539148173"/>
        <to usec="0" sec="1539148177"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.218.99.219" dst_ip="123.233.169.73" src_port="54719" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539147732"/>
        <to usec="0" sec="1539147754"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="131.78.15.30" dst_ip="185.158.3.213" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539147760"/>
        <to usec="0" sec="1539148144"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.218.98.226"/>
        </slice>
        <from usec="0" sec="1539147640"/>
        <to usec="0" sec="1539147642"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.206.157.206" dst_ip="137.116.142.199" src_port="55742" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539148470"/>
        <to usec="0" sec="1539148478"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.218.98.227" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539147810"/>
        <to usec="0" sec="1539148121"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="172.93.106.33" dst_ip="163.218.62.165" src_port="443" dst_port="49633" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539147851"/>
        <to usec="0" sec="1539147852"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="129.60.223.39" dst_ip="163.218.119.12" src_port="52039" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539147850"/>
        <to usec="0" sec="1539147851"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="17.157.66.84" dst_ip="202.156.141.16" src_port="42963" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539147777"/>
        <to usec="0" sec="1539147779"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="62.146.184.178" dst_ip="163.218.98.227" src_port="80" dst_port="54843" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539147945"/>
        <to usec="0" sec="1539147956"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="131.142.110.95" dst_ip="163.218.36.153" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539147920"/>
        <to usec="0" sec="1539147922"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="74.101.9.245" dst_ip="34.5.162.100" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539147824"/>
        <to usec="0" sec="1539147846"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.227.114.176" dst_ip="198.217.113.186" src_port="62381" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539147877"/>
        <to usec="0" sec="1539148371"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="143.132.62.100" dst_ip="163.218.225.56" src_port="443" dst_port="54567" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539147778"/>
        <to usec="0" sec="1539147780"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.218.59.97" dst_ip="52.91.212.114" src_port="64400" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539148162"/>
        <to usec="0" sec="1539148163"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="52.71.37.105" dst_ip="202.180.197.15" src_port="443" dst_port="54276" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539148142"/>
        <to usec="0" sec="1539148144"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.218.97.109" dst_ip="54.212.91.6" src_port="39637" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539147640"/>
        <to usec="0" sec="1539148144"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.218.190.81" dst_ip="140.76.58.135" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539147706"/>
        <to usec="0" sec="1539148009"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.206.157.206" dst_ip="5.59.221.180" src_port="52652" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539148277"/>
        <to usec="0" sec="1539148478"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="172.93.107.153" dst_ip="163.218.227.49" src_port="443" dst_port="53402" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539148067"/>
        <to usec="0" sec="1539148069"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="17.154.153.234" dst_ip="119.10.49.17" src_port="7714" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539148075"/>
        <to usec="0" sec="1539148076"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="196.71.157.255" dst_ip="203.206.157.206" src_port="80" dst_port="40886" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539147699"/>
        <to usec="0" sec="1539147829"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="96.121.202.120" dst_ip="203.206.143.15" src_port="42770" dst_port="8333" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539147915"/>
        <to usec="0" sec="1539147916"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="183.186.207.125" dst_ip="202.189.61.79" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539147929"/>
        <to usec="0" sec="1539148099"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="74.101.96.142" dst_ip="163.218.97.34" src_port="19305" dst_port="62402" proto="udp"/>
        </slice>
        <from usec="0" sec="1539147813"/>
        <to usec="0" sec="1539148098"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.189.14.217" dst_ip="52.145.4.52" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539147941"/>
        <to usec="0" sec="1539148440"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="124.157.144.38" dst_ip="202.180.193.97" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539147881"/>
        <to usec="0" sec="1539147883"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="46.106.72.141" dst_ip="203.206.135.191" src_port="44272" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539147796"/>
        <to usec="0" sec="1539147797"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.218.11.215" dst_ip="67.29.38.127" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539147815"/>
        <to usec="0" sec="1539147878"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.227.50.192"/>
        </slice>
        <from usec="0" sec="1539148153"/>
        <to usec="0" sec="1539148155"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.227.114.81"/>
        </slice>
        <from usec="0" sec="1539147640"/>
        <to usec="0" sec="1539147642"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.218.98.88" dst_ip="8.130.85.233" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539147640"/>
        <to usec="0" sec="1539148169"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="202.180.197.15"/>
        </slice>
        <from usec="0" sec="1539148173"/>
        <to usec="0" sec="1539148179"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="151.122.30.38" dst_ip="162.90.196.192" src_port="64191" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539148173"/>
        <to usec="0" sec="1539148286"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.14.47.236" dst_ip="163.218.99.97" src_port="443" dst_port="48653" proto="udp"/>
        </slice>
        <from usec="0" sec="1539148149"/>
        <to usec="0" sec="1539148150"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.218.166.142" dst_ip="59.127.167.172" src_port="11912" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539148373"/>
        <to usec="0" sec="1539148375"/>
    </anomaly>
    <anomaly type="notice" value="0.674105,1.14926,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.218.63.42" dst_ip="198.229.127.21" dst_port="443"/>
        </slice>
        <from usec="0" sec="1539147730"/>
        <to usec="0" sec="1539148145"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.222.83.29" dst_ip="163.218.136.209" src_port="51738" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539147920"/>
        <to usec="0" sec="1539147921"/>
    </anomaly>
    <anomaly type="notice" value="0.59915,1.09261,503,1 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="13.86.130.199" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="65.156.3.99" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539147833"/>
        <to usec="0" sec="1539147834"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.227.50.92" dst_ip="52.91.87.187" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539148332"/>
        <to usec="0" sec="1539148334"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.218.225.56"/>
        </slice>
        <from usec="0" sec="1539147760"/>
        <to usec="0" sec="1539147762"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="52.65.60.33"/>
        </slice>
        <from usec="0" sec="1539148168"/>
        <to usec="0" sec="1539148169"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.227.181.106" dst_port="443"/>
        </slice>
        <from usec="0" sec="1539147864"/>
        <to usec="0" sec="1539148177"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.227.99.155"/>
        </slice>
        <from usec="0" sec="1539148148"/>
        <to usec="0" sec="1539148150"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.227.53.163"/>
        </slice>
        <from usec="0" sec="1539148488"/>
        <to usec="0" sec="1539148490"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,010,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.218.127.246" dst_port="23"/>
        </slice>
        <from usec="0" sec="1539147810"/>
        <to usec="0" sec="1539147811"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.218.227.43" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539147879"/>
        <to usec="0" sec="1539147882"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.189.61.116"/>
        </slice>
        <from usec="0" sec="1539148411"/>
        <to usec="0" sec="1539148412"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="176.86.135.22" proto="tcp"/>
        </slice>
        <from usec="0" sec="1539147914"/>
        <to usec="0" sec="1539147916"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.206.135.17"/>
        </slice>
        <from usec="0" sec="1539148487"/>
        <to usec="0" sec="1539148488"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.159.100.224"/>
        </slice>
        <from usec="0" sec="1539147865"/>
        <to usec="0" sec="1539147867"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="205.50.120.243"/>
        </slice>
        <from usec="0" sec="1539148375"/>
        <to usec="0" sec="1539148377"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="183.190.27.115"/>
        </slice>
        <from usec="0" sec="1539148487"/>
        <to usec="0" sec="1539148488"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.86.181.23"/>
        </slice>
        <from usec="0" sec="1539147714"/>
        <to usec="0" sec="1539147716"/>
    </anomaly>
    <anomaly type="notice" value="0.456129,1.10407,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.206.128.74"/>
        </slice>
        <from usec="0" sec="1539148466"/>
        <to usec="0" sec="1539148467"/>
    </anomaly>
    <anomaly type="notice" value="0.674105,1.14926,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.218.152.45" dst_ip="38.96.197.31" src_port="54793" dst_port="80"/>
        </slice>
        <from usec="0" sec="1539148140"/>
        <to usec="0" sec="1539148141"/>
    </anomaly>
    <anomaly type="notice" value="0.674105,1.14926,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="198.229.127.21" dst_ip="163.218.11.71" src_port="443"/>
            <filter src_ip="198.229.127.21" dst_ip="163.218.63.42" src_port="443"/>
            <filter src_ip="198.229.127.21" dst_ip="163.218.60.159" src_port="443"/>
        </slice>
        <from usec="0" sec="1539148142"/>
        <to usec="0" sec="1539148144"/>
    </anomaly>
    <anomaly type="notice" value="0.674105,1.14926,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.218.99.247" dst_ip="52.246.59.202" dst_port="443"/>
        </slice>
        <from usec="0" sec="1539147721"/>
        <to usec="0" sec="1539147855"/>
    </anomaly>
    <anomaly type="notice" value="0.674105,1.14926,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.227.99.203" dst_port="443"/>
            <filter src_ip="133.227.99.203" dst_port="80"/>
            <filter src_ip="133.227.99.203" dst_ip="82.50.113.182" dst_port="53"/>
        </slice>
        <from usec="0" sec="1539147693"/>
        <to usec="0" sec="1539147846"/>
    </anomaly>
    <anomaly type="notice" value="0.674105,1.14926,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="5.59.221.180" dst_ip="203.206.157.206" src_port="443" dst_port="52652"/>
        </slice>
        <from usec="0" sec="1539148264"/>
        <to usec="0" sec="1539148294"/>
    </anomaly>
    <anomaly type="notice" value="0.674105,1.14926,901,1 1 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.218.127.27" dst_ip="73.70.97.61" dst_port="443"/>
        </slice>
        <from usec="0" sec="1539148457"/>
        <to usec="0" sec="1539148472"/>
    </anomaly>
    <anomaly type="notice" value="0.674105,1.14926,010,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="176.86.135.22"/>
        </slice>
        <from usec="0" sec="1539147914"/>
        <to usec="0" sec="1539148154"/>
    </anomaly>
    <anomaly type="notice" value="0.674105,1.14926,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="114.46.141.194" dst_port="23"/>
        </slice>
        <from usec="0" sec="1539148476"/>
        <to usec="0" sec="1539148499"/>
    </anomaly>
    <anomaly type="notice" value="0.674105,1.14926,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="36.14.235.57" dst_port="23"/>
        </slice>
        <from usec="0" sec="1539148186"/>
        <to usec="0" sec="1539148238"/>
    </anomaly>
    <anomaly type="notice" value="0.674105,1.14926,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="122.183.126.238" dst_port="23"/>
        </slice>
        <from usec="0" sec="1539148314"/>
        <to usec="0" sec="1539148353"/>
    </anomaly>
    <anomaly type="notice" value="0.674105,1.14926,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="203.206.157.206" dst_port="23"/>
        </slice>
        <from usec="0" sec="1539148098"/>
        <to usec="0" sec="1539148147"/>
    </anomaly>
    <anomaly type="notice" value="0.674105,1.14926,012,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="107.69.10.115" dst_port="953"/>
        </slice>
        <from usec="0" sec="1539147885"/>
        <to usec="0" sec="1539147886"/>
    </anomaly>
    <anomaly type="notice" value="0.674105,1.14926,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="45.130.27.170" dst_port="23"/>
        </slice>
        <from usec="0" sec="1539147877"/>
        <to usec="0" sec="1539147894"/>
    </anomaly>
    <anomaly type="notice" value="0.674105,1.14926,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="111.57.94.110" dst_port="23"/>
        </slice>
        <from usec="0" sec="1539148341"/>
        <to usec="0" sec="1539148393"/>
    </anomaly>
    <anomaly type="notice" value="0.674105,1.14926,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="107.69.28.34" dst_port="953"/>
        </slice>
        <from usec="0" sec="1539147884"/>
        <to usec="0" sec="1539147886"/>
    </anomaly>
    <anomaly type="notice" value="0.674105,1.14926,999,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="107.69.10.115" src_port="953"/>
        </slice>
        <from usec="0" sec="1539147885"/>
        <to usec="0" sec="1539147886"/>
    </anomaly>
    <anomaly type="notice" value="0.674105,1.14926,999,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.180.197.15" dst_port="53"/>
        </slice>
        <from usec="0" sec="1539148218"/>
        <to usec="0" sec="1539148220"/>
    </anomaly>
    <anomaly type="notice" value="0.674105,1.14926,502,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="61.63.231.27" dst_port="22"/>
        </slice>
        <from usec="0" sec="1539147763"/>
        <to usec="0" sec="1539147765"/>
    </anomaly>
    <anomaly type="notice" value="0.674105,1.14926,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.86.234.29" dst_ip="149.235.128.236" src_port="49286" dst_port="53"/>
            <filter src_ip="203.86.234.29" dst_ip="149.235.128.236" src_port="19705" dst_port="53"/>
            <filter src_ip="203.86.234.29" dst_ip="202.180.197.15" src_port="53" dst_port="52652"/>
        </slice>
        <from usec="0" sec="1539148224"/>
        <to usec="0" sec="1539148226"/>
    </anomaly>
    <anomaly type="notice" value="0.674105,1.14926,502,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="17.154.153.15" dst_port="22"/>
        </slice>
        <from usec="0" sec="1539147958"/>
        <to usec="0" sec="1539147967"/>
    </anomaly>
    <anomaly type="notice" value="0.674105,1.14926,999,1 1 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="183.190.34.133" dst_ip="202.180.197.40" src_port="56320" dst_port="25"/>
        </slice>
        <from usec="0" sec="1539147938"/>
        <to usec="0" sec="1539147939"/>
    </anomaly>
    <anomaly type="notice" value="0.662344,1.17376,010,0 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="111.56.187.88" dst_port="23"/>
        </slice>
        <from usec="0" sec="1539147827"/>
        <to usec="0" sec="1539147878"/>
    </anomaly>
    <anomaly type="notice" value="0.756234,1.163,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1539147600"/>
        <to usec="0" sec="1539148428"/>
    </anomaly>
    <anomaly type="notice" value="0.756234,1.163,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="182.22.117.19"/>
        </slice>
        <from usec="0" sec="1539147600"/>
        <to usec="0" sec="1539147696"/>
    </anomaly>
    <anomaly type="notice" value="0.756234,1.163,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.218.195.218"/>
        </slice>
        <from usec="0" sec="1539147600"/>
        <to usec="0" sec="1539147708"/>
    </anomaly>
    <anomaly type="notice" value="0.756234,1.163,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="218.226.208.131"/>
        </slice>
        <from usec="0" sec="1539147600"/>
        <to usec="0" sec="1539147708"/>
    </anomaly>
    <anomaly type="notice" value="0.756234,1.163,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.227.29.42"/>
        </slice>
        <from usec="0" sec="1539147603"/>
        <to usec="0" sec="1539147698"/>
    </anomaly>
    <anomaly type="notice" value="0.756234,1.163,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="17.154.153.144"/>
        </slice>
        <from usec="0" sec="1539147625"/>
        <to usec="0" sec="1539147629"/>
    </anomaly>
    <anomaly type="notice" value="0.756234,1.163,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1539147600"/>
        <to usec="0" sec="1539148428"/>
    </anomaly>
    <anomaly type="notice" value="0.756234,1.163,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="85.162.157.120"/>
        </slice>
        <from usec="0" sec="1539147600"/>
        <to usec="0" sec="1539147798"/>
    </anomaly>
    <anomaly type="notice" value="0.756234,1.163,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="113.19.172.3"/>
        </slice>
        <from usec="0" sec="1539147602"/>
        <to usec="0" sec="1539147793"/>
    </anomaly>
    <anomaly type="notice" value="0.756234,1.163,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="54.163.8.218" dst_port="8081"/>
        </slice>
        <from usec="0" sec="1539147602"/>
        <to usec="0" sec="1539147798"/>
    </anomaly>
    <anomaly type="notice" value="0.756234,1.163,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="101.87.8.69"/>
        </slice>
        <from usec="0" sec="1539147600"/>
        <to usec="0" sec="1539147978"/>
    </anomaly>
    <anomaly type="notice" value="0.756234,1.163,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="203.206.132.221" src_port="3124"/>
            <filter src_ip="203.206.132.221"/>
        </slice>
        <from usec="0" sec="1539147600"/>
        <to usec="0" sec="1539147978"/>
    </anomaly>
    <anomaly type="notice" value="0.756234,1.163,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="162.219.180.8"/>
        </slice>
        <from usec="0" sec="1539147600"/>
        <to usec="0" sec="1539147978"/>
    </anomaly>
    <anomaly type="notice" value="0.756234,1.163,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="45.223.40.128"/>
        </slice>
        <from usec="0" sec="1539147600"/>
        <to usec="0" sec="1539147978"/>
    </anomaly>
    <anomaly type="notice" value="0.756234,1.163,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.218.127.248"/>
        </slice>
        <from usec="0" sec="1539147601"/>
        <to usec="0" sec="1539147977"/>
    </anomaly>
    <anomaly type="notice" value="0.756234,1.163,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.218.9.190"/>
        </slice>
        <from usec="0" sec="1539147601"/>
        <to usec="0" sec="1539147978"/>
    </anomaly>
    <anomaly type="notice" value="0.756234,1.163,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="188.239.78.16" src_port="23453" dst_port="23"/>
        </slice>
        <from usec="0" sec="1539147602"/>
        <to usec="0" sec="1539147965"/>
    </anomaly>
    <anomaly type="notice" value="0.756234,1.163,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="31.242.214.24"/>
        </slice>
        <from usec="0" sec="1539147603"/>
        <to usec="0" sec="1539147878"/>
    </anomaly>
    <anomaly type="notice" value="0.756234,1.163,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="37.118.182.11"/>
        </slice>
        <from usec="0" sec="1539147605"/>
        <to usec="0" sec="1539148158"/>
    </anomaly>
    <anomaly type="notice" value="0.756234,1.163,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="111.2.1.190"/>
        </slice>
        <from usec="0" sec="1539147607"/>
        <to usec="0" sec="1539147975"/>
    </anomaly>
    <anomaly type="notice" value="0.756234,1.163,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.180.197.15"/>
        </slice>
        <from usec="0" sec="1539147610"/>
        <to usec="0" sec="1539147978"/>
    </anomaly>
    <anomaly type="notice" value="0.756234,1.163,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="31.92.123.104"/>
        </slice>
        <from usec="0" sec="1539147618"/>
        <to usec="0" sec="1539147976"/>
    </anomaly>
    <anomaly type="notice" value="0.756234,1.163,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.227.38.218"/>
        </slice>
        <from usec="0" sec="1539147625"/>
        <to usec="0" sec="1539147971"/>
    </anomaly>
    <anomaly type="notice" value="0.756234,1.163,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="155.153.218.20"/>
        </slice>
        <from usec="0" sec="1539147925"/>
        <to usec="0" sec="1539147973"/>
    </anomaly>
    <anomaly type="notice" value="0.756234,1.163,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="198.148.194.167"/>
        </slice>
        <from usec="0" sec="1539148101"/>
        <to usec="0" sec="1539148152"/>
    </anomaly>
    <anomaly type="notice" value="0.756234,1.163,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="107.114.17.123"/>
        </slice>
        <from usec="0" sec="1539147604"/>
        <to usec="0" sec="1539148234"/>
    </anomaly>
    <anomaly type="notice" value="0.705476,1.14359,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="65.154.97.41"/>
        </slice>
        <from usec="0" sec="1539147600"/>
        <to usec="0" sec="1539147646"/>
    </anomaly>
    <anomaly type="notice" value="0.705476,1.14359,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="52.65.114.162" dst_ip="133.112.128.37" src_port="49480"/>
            <filter src_ip="13.77.93.139" dst_ip="133.112.128.37" src_port="49480"/>
        </slice>
        <from usec="0" sec="1539147600"/>
        <to usec="0" sec="1539147646"/>
    </anomaly>
    <anomaly type="notice" value="0.705476,1.14359,999,0 0 0 0 0 0 1 0 0 0 0 0,DDoSUDP">
        <slice>
            <filter dst_ip="163.218.127.36"/>
        </slice>
        <from usec="0" sec="1539147600"/>
        <to usec="0" sec="1539147646"/>
    </anomaly>
    <anomaly type="notice" value="0.705476,1.14359,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.244.78.2"/>
        </slice>
        <from usec="0" sec="1539147600"/>
        <to usec="0" sec="1539147646"/>
    </anomaly>
    <anomaly type="notice" value="0.705476,1.14359,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="163.218.189.177"/>
        </slice>
        <from usec="0" sec="1539147600"/>
        <to usec="0" sec="1539147646"/>
    </anomaly>
    <anomaly type="notice" value="0.705476,1.14359,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.180.197.15" src_port="53"/>
        </slice>
        <from usec="0" sec="1539147600"/>
        <to usec="0" sec="1539147646"/>
    </anomaly>
    <anomaly type="notice" value="0.705476,1.14359,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="202.180.193.97"/>
        </slice>
        <from usec="0" sec="1539147600"/>
        <to usec="0" sec="1539147646"/>
    </anomaly>
    <anomaly type="notice" value="0.705476,1.14359,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.189.10.139"/>
        </slice>
        <from usec="0" sec="1539147600"/>
        <to usec="0" sec="1539147646"/>
    </anomaly>
    <anomaly type="notice" value="0.705476,1.14359,504,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.218.74.166"/>
        </slice>
        <from usec="0" sec="1539147600"/>
        <to usec="0" sec="1539147646"/>
    </anomaly>
    <anomaly type="notice" value="0.705476,1.14359,999,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="84.52.190.235" dst_ip="203.206.128.70" dst_port="53"/>
        </slice>
        <from usec="0" sec="1539147825"/>
        <to usec="0" sec="1539147871"/>
    </anomaly>
    <anomaly type="notice" value="0.705476,1.14359,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="107.69.58.32" dst_port="953"/>
        </slice>
        <from usec="0" sec="1539147825"/>
        <to usec="0" sec="1539147871"/>
    </anomaly>
    <anomaly type="notice" value="0.705476,1.14359,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="107.69.51.27" dst_port="953"/>
        </slice>
        <from usec="0" sec="1539148005"/>
        <to usec="0" sec="1539148051"/>
    </anomaly>
    <anomaly type="notice" value="0.705476,1.14359,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.189.30.46"/>
        </slice>
        <from usec="0" sec="1539148050"/>
        <to usec="0" sec="1539148096"/>
    </anomaly>
    <anomaly type="notice" value="0.705476,1.14359,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.206.137.28" dst_port="53"/>
        </slice>
        <from usec="0" sec="1539148050"/>
        <to usec="0" sec="1539148096"/>
    </anomaly>
    <anomaly type="notice" value="0.705476,1.14359,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.180.197.15" src_port="53"/>
        </slice>
        <from usec="0" sec="1539148050"/>
        <to usec="0" sec="1539148096"/>
    </anomaly>
    <anomaly type="notice" value="0.705476,1.14359,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.218.191.83"/>
        </slice>
        <from usec="0" sec="1539148050"/>
        <to usec="0" sec="1539148096"/>
    </anomaly>
    <anomaly type="notice" value="0.716529,1.11843,503,1 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="202.180.193.97" dst_port="80"/>
        </slice>
        <from usec="0" sec="1539148050"/>
        <to usec="0" sec="1539148159"/>
    </anomaly>
    <anomaly type="notice" value="0.705476,1.14359,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="60.226.21.136"/>
        </slice>
        <from usec="0" sec="1539148050"/>
        <to usec="0" sec="1539148096"/>
    </anomaly>
    <anomaly type="notice" value="0.705476,1.14359,011,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="192.224.63.122" src_port="52869"/>
        </slice>
        <from usec="0" sec="1539148050"/>
        <to usec="0" sec="1539148096"/>
    </anomaly>
    <anomaly type="notice" value="0.705476,1.14359,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.218.140.89"/>
        </slice>
        <from usec="0" sec="1539148050"/>
        <to usec="0" sec="1539148096"/>
    </anomaly>
    <anomaly type="notice" value="0.705476,1.14359,504,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.206.128.106" src_port="443"/>
            <filter src_ip="1.14.255.26" dst_ip="203.206.128.106" src_port="53"/>
        </slice>
        <from usec="0" sec="1539148050"/>
        <to usec="0" sec="1539148096"/>
    </anomaly>
    <anomaly type="notice" value="0.705476,1.14359,504,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.206.157.206"/>
        </slice>
        <from usec="0" sec="1539148050"/>
        <to usec="0" sec="1539148096"/>
    </anomaly>
    <anomaly type="notice" value="0.705476,1.14359,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="63.157.159.22" src_port="47278"/>
            <filter src_ip="63.157.159.22" src_port="51837"/>
        </slice>
        <from usec="0" sec="1539148185"/>
        <to usec="0" sec="1539148231"/>
    </anomaly>
    <anomaly type="notice" value="0.705476,1.14359,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="206.197.178.145" dst_port="52869"/>
        </slice>
        <from usec="0" sec="1539148185"/>
        <to usec="0" sec="1539148231"/>
    </anomaly>
    <anomaly type="notice" value="0.705476,1.14359,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="176.86.135.11" src_port="41708"/>
            <filter src_ip="176.86.135.11" src_port="41789" dst_port="46196"/>
        </slice>
        <from usec="0" sec="1539148410"/>
        <to usec="0" sec="1539148456"/>
    </anomaly>
    <anomaly type="notice" value="0.705476,1.14359,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="176.86.135.30" src_port="42488" dst_port="2925"/>
            <filter src_ip="176.86.135.30" src_port="42488" dst_port="2923"/>
            <filter src_ip="176.86.135.30" src_port="42488" dst_port="2924"/>
        </slice>
        <from usec="0" sec="1539148410"/>
        <to usec="0" sec="1539148456"/>
    </anomaly>
    <anomaly type="notice" value="0.705476,1.14359,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="206.197.178.145"/>
        </slice>
        <from usec="0" sec="1539148410"/>
        <to usec="0" sec="1539148456"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="104.35.4.29" src_port="17147" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="109.189.191.133"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="115.221.57.115"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="118.64.178.116" src_port="40801" dst_port="623"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,502,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="133.227.136.120"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="182.22.9.34"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="173.14.44.95"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="163.218.226.218"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="163.218.191.97"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="172.134.48.235"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="172.134.40.184" dst_port="808"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.59915,1.09261,503,1 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="17.157.72.51" src_port="443"/>
            <filter src_ip="17.157.72.51" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,504,0 0 0 0 0 0 0 0 0 1 0 0,heavy_hitter">
        <slice>
            <filter src_ip="173.14.30.148" dst_ip="163.218.126.0" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="184.231.36.168"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="124.28.177.148" src_port="25"/>
            <filter src_ip="124.28.177.148" dst_port="8889"/>
            <filter src_ip="124.28.177.148" dst_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="203.206.131.214" dst_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="203.206.143.166"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="202.180.197.15"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="206.197.84.25" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.59915,1.09261,504,1 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="206.89.125.176" dst_ip="203.206.133.168" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="51.15.162.146" src_port="42621"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="52.181.203.10"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="54.53.10.71"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="59.81.212.179"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="61.92.151.216" src_port="63242" dst_port="21"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="64.30.247.52"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="103.215.191.59"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="103.178.243.166"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,999,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="104.93.178.40"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="125.180.203.167"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,010,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="202.180.197.15" dst_port="50356"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="149.235.181.211"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.662344,1.17376,010,0 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="1.193.166.97" dst_port="23"/>
        </slice>
        <from usec="0" sec="1539147920"/>
        <to usec="0" sec="1539147961"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,999,0 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter dst_ip="163.218.157.249" src_port="30303"/>
            <filter dst_ip="163.218.157.249" dst_port="30303"/>
            <filter src_port="30303" dst_port="30303"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.180.197.153" src_port="53"/>
            <filter dst_ip="202.180.197.153" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,020,0 0 0 0 0 0 0 0 0 1 0 0,icmp_error">
        <slice>
            <filter dst_ip="202.189.5.195"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.59915,1.09261,504,1 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="202.189.61.78" dst_port="80"/>
            <filter src_ip="103.187.236.229" dst_ip="202.189.61.78" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.206.139.167" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.59915,1.09261,503,1 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="163.218.225.61" dst_ip="222.251.131.27" src_port="51540" dst_port="80"/>
            <filter src_ip="163.218.225.61" dst_ip="222.251.131.27" src_port="51539" dst_port="80"/>
            <filter src_ip="133.227.53.175" dst_ip="222.251.131.27" src_port="56948" dst_port="80"/>
            <filter src_ip="202.180.197.15" dst_ip="222.251.131.27" src_port="56870" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,504,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="222.148.139.38"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="34.18.88.8"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="35.77.226.89"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="66.233.134.153"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,011,0 0 0 0 0 0 0 0 0 1 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="77.188.108.247" dst_port="40275"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.585886,1.11835,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="94.50.173.189"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
