<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="notice" value="0.654964,1.13815,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="164.53.231.46" dst_ip="163.35.131.86" src_port="443" dst_port="39416" proto="tcp"/>
        </slice>
        <from usec="0" sec="1549084366"/>
        <to usec="0" sec="1549084367"/>
    </anomaly>
    <anomaly type="notice" value="0.654964,1.13815,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.35.3.122" dst_ip="23.59.124.222" src_port="12664" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1549084420"/>
        <to usec="0" sec="1549084422"/>
    </anomaly>
    <anomaly type="notice" value="0.654964,1.13815,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.35.1.78" dst_ip="74.13.208.187" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1549083739"/>
        <to usec="0" sec="1549083740"/>
    </anomaly>
    <anomaly type="notice" value="0.654964,1.13815,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.35.2.145" dst_ip="198.41.143.188" src_port="50155" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1549084455"/>
        <to usec="0" sec="1549084457"/>
    </anomaly>
    <anomaly type="notice" value="0.654964,1.13815,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.35.87.212" dst_ip="213.199.190.96" src_port="56863" dst_port="873" proto="tcp"/>
        </slice>
        <from usec="0" sec="1549083877"/>
        <to usec="0" sec="1549083899"/>
    </anomaly>
    <anomaly type="notice" value="0.654964,1.13815,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="14.7.220.71" dst_ip="163.35.1.49" src_port="80" dst_port="59257" proto="tcp"/>
        </slice>
        <from usec="0" sec="1549084218"/>
        <to usec="0" sec="1549084219"/>
    </anomaly>
    <anomaly type="notice" value="0.654964,1.13815,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.4.214.72" dst_ip="52.122.53.86" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1549083636"/>
        <to usec="0" sec="1549084359"/>
    </anomaly>
    <anomaly type="notice" value="0.654964,1.13815,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="23.94.54.57" dst_ip="163.35.1.34" src_port="443" dst_port="12144" proto="tcp"/>
        </slice>
        <from usec="0" sec="1549084427"/>
        <to usec="0" sec="1549084428"/>
    </anomaly>
    <anomaly type="notice" value="0.654964,1.13815,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="144.38.251.55" dst_ip="202.249.205.175" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1549084231"/>
        <to usec="0" sec="1549084233"/>
    </anomaly>
    <anomaly type="notice" value="0.654964,1.13815,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="74.124.92.105" dst_ip="163.35.1.64" src_port="443" dst_port="46220" proto="udp"/>
        </slice>
        <from usec="0" sec="1549083820"/>
        <to usec="0" sec="1549084018"/>
    </anomaly>
    <anomaly type="notice" value="0.654964,1.13815,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.164.102.195" dst_ip="202.249.205.188" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1549084084"/>
        <to usec="0" sec="1549084085"/>
    </anomaly>
    <anomaly type="notice" value="0.654964,1.13815,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="111.192.91.238" dst_port="445" proto="tcp"/>
        </slice>
        <from usec="0" sec="1549083933"/>
        <to usec="0" sec="1549083934"/>
    </anomaly>
    <anomaly type="notice" value="0.745263,1.18724,020,0 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="128.241.38.145"/>
        </slice>
        <from usec="0" sec="1549084385"/>
        <to usec="0" sec="1549084386"/>
    </anomaly>
    <anomaly type="notice" value="0.620479,1.12825,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="203.74.147.231" src_port="80"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="notice" value="0.620479,1.12825,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="74.124.204.147" dst_port="81"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="notice" value="0.620479,1.12825,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.35.214.190" src_port="53"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="notice" value="0.620479,1.12825,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.74.139.15" src_port="53"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="notice" value="0.620479,1.12825,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.72.7.71" src_port="43729" dst_port="2750"/>
            <filter src_ip="185.72.7.71" src_port="43729" dst_port="2749"/>
            <filter src_ip="185.72.7.71" src_port="43729" dst_port="2751"/>
        </slice>
        <from usec="0" sec="1549083735"/>
        <to usec="0" sec="1549083781"/>
    </anomaly>
    <anomaly type="notice" value="0.620479,1.12825,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="104.252.113.84"/>
        </slice>
        <from usec="0" sec="1549083735"/>
        <to usec="0" sec="1549083781"/>
    </anomaly>
    <anomaly type="notice" value="0.620479,1.12825,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="125.80.94.150"/>
        </slice>
        <from usec="0" sec="1549083735"/>
        <to usec="0" sec="1549083781"/>
    </anomaly>
    <anomaly type="notice" value="0.620479,1.12825,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.74.139.33" dst_port="53"/>
        </slice>
        <from usec="0" sec="1549083915"/>
        <to usec="0" sec="1549083961"/>
    </anomaly>
    <anomaly type="notice" value="0.620479,1.12825,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="103.188.227.47" dst_port="53"/>
        </slice>
        <from usec="0" sec="1549083915"/>
        <to usec="0" sec="1549083961"/>
    </anomaly>
    <anomaly type="notice" value="0.620479,1.12825,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.39.34.35" src_port="46590"/>
        </slice>
        <from usec="0" sec="1549084140"/>
        <to usec="0" sec="1549084186"/>
    </anomaly>
    <anomaly type="notice" value="0.620479,1.12825,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="92.63.5.171"/>
        </slice>
        <from usec="0" sec="1549084140"/>
        <to usec="0" sec="1549084186"/>
    </anomaly>
    <anomaly type="notice" value="0.620479,1.12825,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="89.135.81.248" dst_port="4089"/>
        </slice>
        <from usec="0" sec="1549084140"/>
        <to usec="0" sec="1549084186"/>
    </anomaly>
    <anomaly type="notice" value="0.620479,1.12825,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="103.188.210.120" dst_port="25276"/>
        </slice>
        <from usec="0" sec="1549084140"/>
        <to usec="0" sec="1549084186"/>
    </anomaly>
    <anomaly type="notice" value="0.620479,1.12825,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="103.188.210.120" dst_port="25277"/>
        </slice>
        <from usec="0" sec="1549084140"/>
        <to usec="0" sec="1549084186"/>
    </anomaly>
    <anomaly type="notice" value="0.620479,1.12825,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.202.135.7"/>
        </slice>
        <from usec="0" sec="1549084320"/>
        <to usec="0" sec="1549084366"/>
    </anomaly>
    <anomaly type="notice" value="0.620479,1.12825,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="74.124.204.147"/>
        </slice>
        <from usec="0" sec="1549084320"/>
        <to usec="0" sec="1549084366"/>
    </anomaly>
    <anomaly type="notice" value="0.620479,1.12825,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.35.214.158" src_port="53"/>
        </slice>
        <from usec="0" sec="1549084320"/>
        <to usec="0" sec="1549084366"/>
    </anomaly>
    <anomaly type="notice" value="0.743899,1.16126,010,1 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.35.14.60" dst_port="23"/>
        </slice>
        <from usec="0" sec="1549084320"/>
        <to usec="0" sec="1549084367"/>
    </anomaly>
    <anomaly type="notice" value="0.620479,1.12825,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.244.44.137" src_port="53"/>
        </slice>
        <from usec="0" sec="1549084410"/>
        <to usec="0" sec="1549084456"/>
    </anomaly>
    <anomaly type="notice" value="0.620479,1.12825,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.249.205.204" src_port="53"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="notice" value="0.752382,1.19535,504,0 0 0 0 0 0 0 0 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.35.196.52" src_port="443"/>
            <filter dst_ip="163.35.196.52" src_port="80"/>
        </slice>
        <from usec="0" sec="1549083600"/>
        <to usec="0" sec="1549083646"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="42.179.196.62"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.625802,1.09917,010,0 0 0 0 0 0 1 0 0 1 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="104.252.114.240" dst_port="445"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.685786,1.06942,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.35.3.199" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="117.203.236.27"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="123.13.41.1"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,999,0 0 0 0 0 0 0 0 0 1 0 0,point_to_point">
        <slice>
            <filter src_ip="131.136.226.27"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="139.196.80.149"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="14.7.218.97"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="14.131.129.22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="148.196.187.43"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.654964,1.13815,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="160.78.151.136" dst_ip="203.74.133.147" src_port="62684" dst_port="80"/>
            <filter src_ip="160.78.151.136" dst_ip="203.74.133.147" src_port="62683" dst_port="80"/>
        </slice>
        <from usec="0" sec="1549083827"/>
        <to usec="0" sec="1549083828"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.35.2.44"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="163.35.45.209"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="203.74.138.142" dst_port="80"/>
            <filter src_ip="203.74.138.142" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="163.35.202.105" src_port="21619" dst_port="4672"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="175.131.209.123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="180.188.179.156"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="185.72.7.242"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="74.124.168.41"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="191.151.73.249"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="193.201.248.185"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="31.237.137.52" src_port="56990" dst_port="5901"/>
            <filter src_ip="31.237.137.52" src_port="56461" dst_port="443"/>
            <filter src_ip="31.237.137.52" src_port="54717" dst_port="6001"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="196.51.212.142"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.660009,1.10933,504,1 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="202.244.44.73" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,020,0 0 0 0 0 0 0 0 0 1 0 0,ttl_error">
        <slice>
            <filter src_ip="202.249.246.94"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,502,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="203.74.137.136"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,502,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="218.191.235.196"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="41.207.205.102"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="103.188.210.120"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="66.142.237.190" src_port="29011"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,010,0 0 0 0 0 0 0 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="80.138.113.145"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="91.127.95.150"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="99.140.128.160"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="111.196.56.155"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="119.123.132.231"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.685786,1.06942,011,0 0 0 0 0 0 0 0 0 1 1 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="185.72.6.234" src_port="55985" dst_port="57493"/>
            <filter dst_ip="185.72.6.234" src_port="55984" dst_port="57493"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,502,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="149.22.53.177"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.35.247.30" dst_port="80"/>
            <filter dst_ip="163.35.247.30" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.35.242.23" dst_port="993"/>
            <filter dst_ip="163.35.242.23" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.685786,1.06942,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.35.28.245" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.625802,1.09917,010,0 0 0 0 0 0 1 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="112.156.90.88" src_port="50616"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.685786,1.06942,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.35.2.198" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,504,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="31.237.137.51" dst_ip="203.74.138.142" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.685786,1.06942,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.35.118.229" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,011,0 0 0 0 0 0 0 0 0 1 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="185.72.7.113" dst_port="53125"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,999,0 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="203.74.143.32" src_port="1024"/>
            <filter src_ip="203.74.143.32" src_port="4001"/>
            <filter src_ip="203.74.143.32" dst_port="4001"/>
            <filter src_port="1024" dst_port="4001"/>
            <filter src_port="4001" dst_port="4001"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.685786,1.06942,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="202.196.98.18" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.74.131.19" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.654964,1.13815,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="39.145.68.85" dst_ip="163.35.87.212" src_port="60728" dst_port="80"/>
            <filter src_ip="39.145.68.85" dst_ip="163.35.87.212" src_port="60727" dst_port="80"/>
        </slice>
        <from usec="0" sec="1549083756"/>
        <to usec="0" sec="1549083828"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="206.89.154.218"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="163.35.2.215" dst_ip="70.111.164.168" src_port="59487" dst_port="54243"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.685786,1.06942,503,0 0 0 0 0 0 0 0 0 1 1 0,ptmplaHTTP">
        <slice>
            <filter src_ip="47.201.244.227" src_port="443"/>
            <filter src_ip="47.201.244.227" dst_ip="163.35.2.77" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.685786,1.06942,999,0 0 0 0 0 0 0 0 0 1 1 0,ptpposcaUDP">
        <slice>
            <filter src_ip="133.4.167.146" dst_ip="107.116.27.135" src_port="1900"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.685786,1.06942,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="133.4.11.37" dst_ip="54.40.59.224" dst_port="443"/>
            <filter src_ip="133.4.11.37" dst_ip="52.123.230.254" dst_port="443"/>
            <filter src_ip="133.4.11.37" dst_ip="34.169.127.134" dst_port="443"/>
            <filter src_ip="133.4.11.37" dst_ip="34.151.31.229" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.685786,1.06942,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="139.37.186.172" dst_port="81"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.685786,1.06942,010,0 0 0 0 0 0 0 0 0 1 1 0,sntscSYN">
        <slice>
            <filter src_ip="139.37.184.237" dst_port="8000"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.685786,1.06942,999,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="163.35.242.23" src_port="993"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.685786,1.06942,999,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="163.35.2.37" dst_ip="126.100.56.122" src_port="33720" dst_port="1812"/>
            <filter src_ip="163.35.2.37" dst_ip="126.100.59.161" src_port="33724" dst_port="1701"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="74.124.168.103" dst_ip="163.35.3.252" src_port="443"/>
            <filter src_ip="74.124.168.103" dst_ip="133.138.128.142" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.685786,1.06942,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="17.250.118.214" dst_ip="163.35.3.117" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.685786,1.06942,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="61.177.112.212" dst_ip="203.74.136.68" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.685786,1.06942,010,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="23.34.61.24" src_port="29011"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.685786,1.06942,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="210.118.25.14" dst_ip="163.35.128.191" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.685786,1.06942,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="99.140.59.230" dst_ip="203.74.135.46" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.685786,1.06942,999,0 0 0 0 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter src_ip="163.35.3.85" dst_ip="115.155.89.252" src_port="49160" dst_port="8505"/>
            <filter src_ip="203.74.147.231" dst_ip="115.155.89.252" src_port="10153" dst_port="8501"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="36.208.33.46" dst_ip="163.35.3.109" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.685786,1.06942,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.35.129.250" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.685786,1.06942,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.35.28.113" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.685786,1.06942,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.35.2.205" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.685786,1.06942,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.35.2.66" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.685786,1.06942,020,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="203.74.129.189" dst_port="1102"/>
            <filter dst_ip="203.74.129.189"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.685786,1.06942,503,0 0 0 0 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.74.151.250" src_port="80"/>
            <filter src_ip="208.188.254.65" dst_ip="203.74.151.250" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516935,1.07472,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="163.35.72.90" src_port="80"/>
            <filter src_ip="107.90.195.253" dst_ip="163.35.72.90" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.685786,1.06942,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.35.3.199" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.625802,1.09917,999,0 0 0 0 0 0 1 0 0 1 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.52.32.164" dst_port="636"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
