<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="suspicious" value="1.44801,1.73386,999,1 1 1 1 0 0 0 0 0 1 1 0,ipv4gretun">
        <slice>
            <filter src_ip="203.142.150.232" dst_ip="206.212.228.129"/>
            <filter src_ip="203.142.150.232" dst_ip="204.133.200.24"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.81775,1.95015,999,1 1 1 1 1 1 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="103.39.61.189" dst_port="19"/>
            <filter src_ip="103.39.61.189" dst_port="7"/>
        </slice>
        <from usec="0" sec="1570684068"/>
        <to usec="0" sec="1570684086"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19618,1.65521,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="88.54.10.23" dst_port="22"/>
        </slice>
        <from usec="0" sec="1570683831"/>
        <to usec="0" sec="1570683839"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19618,1.65521,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="52.187.0.194"/>
        </slice>
        <from usec="0" sec="1570683730"/>
        <to usec="0" sec="1570683732"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19618,1.65521,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="210.101.227.210" src_port="5090" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1570684342"/>
        <to usec="0" sec="1570684375"/>
    </anomaly>
    <anomaly type="suspicious" value="1.27974,1.66996,999,1 1 1 0 0 0 0 0 0 1 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="212.191.141.199" dst_port="5060"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19618,1.65521,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="94.153.198.251" src_port="44262" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1570684351"/>
        <to usec="0" sec="1570684352"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19618,1.65521,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="104.255.140.221" src_port="49476" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1570683709"/>
        <to usec="0" sec="1570684205"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19618,1.65521,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="94.125.202.206" src_port="5150" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1570684071"/>
        <to usec="0" sec="1570684154"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19618,1.65521,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="185.43.217.254" dst_port="80"/>
        </slice>
        <from usec="0" sec="1570684094"/>
        <to usec="0" sec="1570684096"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19618,1.65521,010,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="84.52.43.25" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1570683986"/>
        <to usec="0" sec="1570683990"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19618,1.65521,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="60.111.56.25" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1570684099"/>
        <to usec="0" sec="1570684111"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19618,1.65521,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="118.88.170.26" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1570683617"/>
        <to usec="0" sec="1570683621"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19618,1.65521,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="58.79.182.61" dst_port="445"/>
            <filter src_ip="58.79.182.61" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1570683834"/>
        <to usec="0" sec="1570683838"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19618,1.65521,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="112.32.125.198" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1570683867"/>
        <to usec="0" sec="1570683889"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19618,1.65521,010,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="43.228.182.101" dst_port="445"/>
            <filter src_ip="43.228.182.101" dst_port="65530"/>
        </slice>
        <from usec="0" sec="1570684073"/>
        <to usec="0" sec="1570684098"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19618,1.65521,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="115.84.198.159" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1570683991"/>
        <to usec="0" sec="1570683993"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19618,1.65521,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="114.191.215.160" dst_port="65530"/>
        </slice>
        <from usec="0" sec="1570683730"/>
        <to usec="0" sec="1570683732"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19618,1.65521,010,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="124.94.134.95" dst_port="445"/>
            <filter src_ip="124.94.134.95" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1570684127"/>
        <to usec="0" sec="1570684133"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19618,1.65521,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="210.202.165.184" dst_port="445"/>
        </slice>
        <from usec="0" sec="1570684050"/>
        <to usec="0" sec="1570684052"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19618,1.65521,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="46.220.130.250" dst_port="65530"/>
            <filter src_ip="46.220.130.250" dst_port="445"/>
        </slice>
        <from usec="0" sec="1570683886"/>
        <to usec="0" sec="1570684061"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19618,1.65521,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="1.165.50.226" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1570683675"/>
        <to usec="0" sec="1570683676"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19618,1.65521,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="218.61.134.156" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1570683969"/>
        <to usec="0" sec="1570683973"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19618,1.65521,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="1.71.21.61" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1570684452"/>
        <to usec="0" sec="1570684496"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19618,1.65521,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="188.108.44.184" dst_port="445"/>
        </slice>
        <from usec="0" sec="1570683975"/>
        <to usec="0" sec="1570683978"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19618,1.65521,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="218.106.171.240" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1570683923"/>
        <to usec="0" sec="1570683927"/>
    </anomaly>
    <anomaly type="suspicious" value="1.19618,1.65521,010,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="74.3.32.150" dst_port="445"/>
        </slice>
        <from usec="0" sec="1570683741"/>
        <to usec="0" sec="1570683744"/>
    </anomaly>
    <anomaly type="suspicious" value="1.71581,1.82723,502,1 1 1 1 1 0 1 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="218.59.7.116" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.43687,1.77665,504,0 0 0 1 1 1 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.244.163.232" src_port="443"/>
        </slice>
        <from usec="0" sec="1570683601"/>
        <to usec="0" sec="1570683978"/>
    </anomaly>
    <anomaly type="suspicious" value="1.49829,1.76342,502,1 1 1 1 1 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="49.92.118.66" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.43687,1.77665,504,0 0 0 1 1 1 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.244.163.249" src_port="443"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570684337"/>
    </anomaly>
    <anomaly type="suspicious" value="1.43687,1.77665,999,0 0 0 1 1 1 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.142.154.150" dst_ip="121.227.244.121" src_port="6000" dst_port="55945"/>
        </slice>
        <from usec="0" sec="1570683623"/>
        <to usec="0" sec="1570684238"/>
    </anomaly>
    <anomaly type="suspicious" value="1.43687,1.77665,504,0 0 0 1 1 1 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.4.240.171" dst_ip="99.54.126.39" dst_port="443"/>
        </slice>
        <from usec="0" sec="1570684046"/>
        <to usec="0" sec="1570684210"/>
    </anomaly>
    <anomaly type="suspicious" value="1.91868,1.96289,503,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="17.253.107.149" src_port="80"/>
            <filter src_ip="17.253.107.149" src_port="443"/>
            <filter dst_ip="163.195.253.36" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.65639,1.83719,502,0 0 0 1 1 1 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="222.189.175.200" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20726,1.68393,901,0 0 0 0 0 1 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683888"/>
    </anomaly>
    <anomaly type="suspicious" value="1.20726,1.68393,901,0 0 0 0 0 1 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683888"/>
    </anomaly>
    <anomaly type="suspicious" value="1.22372,1.62577,011,0 0 0 1 1 0 1 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="154.21.116.117" dst_port="43826"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570684338"/>
    </anomaly>
    <anomaly type="suspicious" value="1.05351,1.54684,010,1 0 0 0 0 0 1 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="59.165.120.103" dst_ip="203.142.248.163" src_port="43874"/>
        </slice>
        <from usec="0" sec="1570683870"/>
        <to usec="0" sec="1570683916"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33972,1.68445,999,0 0 0 1 0 0 0 0 0 1 1 1,malphfl">
        <slice>
            <filter src_ip="143.78.92.35" dst_ip="203.142.154.152" dst_port="3010"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.33972,1.68445,504,0 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.195.204.96"/>
            <filter dst_ip="163.195.14.120" src_port="443"/>
            <filter dst_ip="163.195.14.23" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.38705,1.66212,010,1 0 0 1 1 0 1 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="94.153.198.156" src_port="42750"/>
            <filter src_ip="89.244.169.193" src_port="43401"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.55406,1.76365,504,0 0 0 1 1 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="203.142.141.193"/>
            <filter dst_ip="163.195.242.198" src_port="443"/>
            <filter dst_ip="163.195.242.198" dst_port="33307"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.9958,2.00545,504,1 1 1 1 1 1 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="202.244.161.125" dst_port="443"/>
            <filter src_ip="202.127.93.226" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41928,1.70523,504,1 0 0 1 0 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="133.4.149.253" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.3446,1.67021,999,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="101.25.40.233" dst_ip="203.142.154.152" src_port="61817" dst_port="37365"/>
            <filter src_ip="101.25.40.233" dst_ip="203.142.154.152" src_port="61816" dst_port="3010"/>
            <filter src_ip="101.25.40.233" dst_ip="203.142.154.152" src_port="61804" dst_port="36571"/>
            <filter src_ip="101.25.40.233" dst_ip="203.142.154.152" src_port="61802" dst_port="3010"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.91868,1.96289,504,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="104.41.153.77" src_port="443"/>
            <filter dst_ip="202.244.161.206" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.3446,1.67021,504,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="203.142.152.16" dst_ip="104.154.22.44" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.3446,1.67021,504,0 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="52.60.151.150" src_port="443"/>
            <filter dst_ip="203.142.159.86" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.42389,1.69117,504,1 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.195.14.175" src_port="443"/>
            <filter dst_ip="163.195.159.104" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.3446,1.67021,504,0 0 0 0 0 0 0 0 0 1 1 1,salphfl">
        <slice>
            <filter src_ip="89.70.155.130" dst_ip="163.195.14.247" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.3446,1.67021,504,0 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.195.159.178" src_port="443"/>
            <filter dst_ip="133.182.254.160" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.91868,1.96289,010,0 0 0 1 1 1 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="92.247.167.201" src_port="59874"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.24749,1.60897,999,0 0 0 1 0 0 1 0 0 1 1 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="163.195.95.146" src_port="53"/>
            <filter dst_ip="202.244.161.144" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.04391,1.54349,503,1 0 0 0 0 0 0 0 0 1 1 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.4.250.251" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.3446,1.67021,999,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="203.142.154.139" dst_port="3001"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.3446,1.67021,999,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="203.142.147.110" dst_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.3446,1.67021,504,0 0 0 0 0 0 0 0 0 1 1 1,mptpla">
        <slice>
            <filter src_ip="133.4.234.181" dst_ip="2.48.112.189" src_port="62589" dst_port="443"/>
            <filter src_ip="133.4.239.110" dst_ip="2.48.112.189" src_port="52691" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.91868,1.96289,999,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="203.142.154.160"/>
            <filter src_ip="203.142.154.167"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.37067,2.17455,010,1 1 1 1 1 1 1 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="92.136.61.211" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="6.86019,5.75016,010,0 0 0 0 0 0 1 1 1 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="0.0.0.0" src_port="32766"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683646"/>
    </anomaly>
    <anomaly type="anomalous" value="2.23067,2.07884,504,1 1 0 1 1 1 1 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="202.244.161.125" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.06803,2.02299,999,1 1 0 1 1 1 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="203.142.154.139" src_port="3001"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.23067,2.07884,504,1 1 0 1 1 1 1 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="202.127.93.226" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.14476,2.03778,504,1 0 0 1 1 1 1 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="202.244.161.172" src_port="443"/>
            <filter dst_ip="202.244.161.69" src_port="443"/>
            <filter dst_ip="202.244.161.223" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.93564,1.9145,001,1 1 1 0 0 0 1 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="89.244.169.184" dst_port="4000"/>
            <filter src_ip="125.194.178.129" dst_port="1023"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.08659,1.99654,010,1 1 1 1 1 0 1 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="185.114.228.66" src_port="54049"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
