<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="notice" value="0.640892,1.47092,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="31.116.229.255" dst_ip="163.195.32.32" src_port="443" dst_port="55325" proto="tcp"/>
        </slice>
        <from usec="0" sec="1570683838"/>
        <to usec="0" sec="1570683839"/>
    </anomaly>
    <anomaly type="notice" value="0.640892,1.47092,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.142.139.228" dst_ip="31.116.229.255" src_port="53542" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1570684110"/>
        <to usec="0" sec="1570684111"/>
    </anomaly>
    <anomaly type="notice" value="0.640892,1.47092,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.244.163.49" dst_ip="198.102.185.226" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1570683934"/>
        <to usec="0" sec="1570684073"/>
    </anomaly>
    <anomaly type="notice" value="0.640892,1.47092,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.142.139.228" dst_ip="163.195.1.113" src_port="443" dst_port="63585" proto="tcp"/>
        </slice>
        <from usec="0" sec="1570684072"/>
        <to usec="0" sec="1570684074"/>
    </anomaly>
    <anomaly type="notice" value="0.640892,1.47092,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="13.29.17.181" dst_ip="163.195.13.176" src_port="443" dst_port="60098" proto="tcp"/>
        </slice>
        <from usec="0" sec="1570684207"/>
        <to usec="0" sec="1570684209"/>
    </anomaly>
    <anomaly type="notice" value="0.640892,1.47092,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.195.155.147" dst_ip="96.118.202.123" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1570684351"/>
        <to usec="0" sec="1570684352"/>
    </anomaly>
    <anomaly type="notice" value="0.640892,1.47092,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="106.50.194.203"/>
        </slice>
        <from usec="0" sec="1570684249"/>
        <to usec="0" sec="1570684250"/>
    </anomaly>
    <anomaly type="notice" value="0.640892,1.47092,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.195.13.179" dst_ip="52.47.167.203" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1570683936"/>
        <to usec="0" sec="1570683945"/>
    </anomaly>
    <anomaly type="notice" value="0.640892,1.47092,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.195.1.113" dst_ip="163.195.159.61" src_port="8801" dst_port="60494" proto="udp"/>
        </slice>
        <from usec="0" sec="1570684340"/>
        <to usec="0" sec="1570684342"/>
    </anomaly>
    <anomaly type="notice" value="0.777509,1.50346,503,1 0 0 1 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.142.156.86" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.640892,1.47092,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.244.161.125" dst_ip="163.195.159.174" src_port="80" dst_port="58666" proto="tcp"/>
        </slice>
        <from usec="0" sec="1570684074"/>
        <to usec="0" sec="1570684075"/>
    </anomaly>
    <anomaly type="notice" value="0.640892,1.47092,004,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="223.205.44.46" dst_port="445" proto="tcp"/>
        </slice>
        <from usec="0" sec="1570683611"/>
        <to usec="0" sec="1570684484"/>
    </anomaly>
    <anomaly type="notice" value="0.640892,1.47092,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.195.13.188" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1570684263"/>
        <to usec="0" sec="1570684276"/>
    </anomaly>
    <anomaly type="notice" value="0.640892,1.47092,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="77.247.16.79" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1570683846"/>
        <to usec="0" sec="1570683847"/>
    </anomaly>
    <anomaly type="notice" value="0.640892,1.47092,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="112.187.246.223" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1570684263"/>
        <to usec="0" sec="1570684269"/>
    </anomaly>
    <anomaly type="notice" value="0.640892,1.47092,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="98.142.134.221" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1570684245"/>
        <to usec="0" sec="1570684494"/>
    </anomaly>
    <anomaly type="notice" value="0.88692,1.52731,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.195.108.157" dst_ip="196.141.19.206" src_port="25"/>
        </slice>
        <from usec="0" sec="1570684454"/>
        <to usec="0" sec="1570684456"/>
    </anomaly>
    <anomaly type="notice" value="0.996758,1.54328,503,1 1 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="203.142.139.228" dst_ip="91.189.27.13" dst_port="80"/>
            <filter src_ip="203.142.159.2" dst_ip="91.189.27.13" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.88692,1.52731,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="64.239.176.244" dst_ip="202.244.165.187" src_port="25"/>
        </slice>
        <from usec="0" sec="1570683819"/>
        <to usec="0" sec="1570683821"/>
    </anomaly>
    <anomaly type="notice" value="0.88692,1.52731,502,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="218.59.7.116" dst_port="22"/>
        </slice>
        <from usec="0" sec="1570683636"/>
        <to usec="0" sec="1570684498"/>
    </anomaly>
    <anomaly type="notice" value="0.996758,1.54328,999,1 1 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="31.163.161.108" dst_ip="203.142.150.232" dst_port="23"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.88692,1.52731,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="210.202.13.242" dst_port="445"/>
        </slice>
        <from usec="0" sec="1570684035"/>
        <to usec="0" sec="1570684039"/>
    </anomaly>
    <anomaly type="notice" value="0.88692,1.52731,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="58.194.169.29" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1570683676"/>
        <to usec="0" sec="1570683680"/>
    </anomaly>
    <anomaly type="notice" value="0.88692,1.52731,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="123.41.64.63" dst_port="445"/>
        </slice>
        <from usec="0" sec="1570684057"/>
        <to usec="0" sec="1570684060"/>
    </anomaly>
    <anomaly type="notice" value="0.88692,1.52731,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="115.128.178.48" dst_port="445"/>
        </slice>
        <from usec="0" sec="1570684042"/>
        <to usec="0" sec="1570684045"/>
    </anomaly>
    <anomaly type="notice" value="0.88692,1.52731,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="83.153.97.241" dst_port="445"/>
        </slice>
        <from usec="0" sec="1570683911"/>
        <to usec="0" sec="1570683914"/>
    </anomaly>
    <anomaly type="notice" value="0.88692,1.52731,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="112.187.232.83" dst_port="445"/>
        </slice>
        <from usec="0" sec="1570684333"/>
        <to usec="0" sec="1570684335"/>
    </anomaly>
    <anomaly type="notice" value="0.88692,1.52731,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="88.114.63.94" dst_port="5901"/>
        </slice>
        <from usec="0" sec="1570684071"/>
        <to usec="0" sec="1570684078"/>
    </anomaly>
    <anomaly type="notice" value="0.88692,1.52731,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="121.173.43.216" dst_port="65529"/>
        </slice>
        <from usec="0" sec="1570683684"/>
        <to usec="0" sec="1570683688"/>
    </anomaly>
    <anomaly type="notice" value="0.88692,1.52731,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="74.3.42.148" dst_port="22"/>
        </slice>
        <from usec="0" sec="1570684351"/>
        <to usec="0" sec="1570684498"/>
    </anomaly>
    <anomaly type="notice" value="0.88692,1.52731,004,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.244.161.125" src_port="445"/>
            <filter dst_ip="202.244.161.125" src_port="65530"/>
        </slice>
        <from usec="0" sec="1570684073"/>
        <to usec="0" sec="1570684098"/>
    </anomaly>
    <anomaly type="notice" value="0.88692,1.52731,010,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="88.114.63.94" src_port="5901"/>
        </slice>
        <from usec="0" sec="1570684071"/>
        <to usec="0" sec="1570684072"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683888"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683888"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="144.40.3.137"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683729"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.188.7.7"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683797"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="178.95.22.151"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683798"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="47.246.180.255"/>
        </slice>
        <from usec="0" sec="1570683601"/>
        <to usec="0" sec="1570683791"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.4.169.87"/>
        </slice>
        <from usec="0" sec="1570683601"/>
        <to usec="0" sec="1570683798"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.195.182.150"/>
        </slice>
        <from usec="0" sec="1570683604"/>
        <to usec="0" sec="1570683794"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="181.58.211.205"/>
        </slice>
        <from usec="0" sec="1570683605"/>
        <to usec="0" sec="1570683798"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="203.142.141.193"/>
        </slice>
        <from usec="0" sec="1570683606"/>
        <to usec="0" sec="1570683780"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.195.12.56"/>
        </slice>
        <from usec="0" sec="1570683607"/>
        <to usec="0" sec="1570683796"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICterp">
        <slice>
            <filter src_ip="129.9.156.255"/>
        </slice>
        <from usec="0" sec="1570683608"/>
        <to usec="0" sec="1570683787"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="211.89.146.197"/>
        </slice>
        <from usec="0" sec="1570683610"/>
        <to usec="0" sec="1570683762"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="122.70.201.62"/>
        </slice>
        <from usec="0" sec="1570683614"/>
        <to usec="0" sec="1570683787"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="94.153.198.156"/>
        </slice>
        <from usec="0" sec="1570683619"/>
        <to usec="0" sec="1570683777"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="143.45.239.149"/>
        </slice>
        <from usec="0" sec="1570683677"/>
        <to usec="0" sec="1570683685"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.195.211.152"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683888"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="178.95.18.0"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683888"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="92.136.61.10" src_port="57079" dst_port="14447"/>
            <filter src_ip="92.136.61.10" src_port="57079" dst_port="14446"/>
            <filter src_ip="92.136.61.10" src_port="57079" dst_port="14448"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683888"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="93.174.156.106"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683888"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.244.163.114"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683886"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="13.18.210.93"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683888"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="202.248.138.127"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683888"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="139.157.11.227" dst_port="8000"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683888"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.73.239.153"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683888"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="52.230.76.9"/>
        </slice>
        <from usec="0" sec="1570683601"/>
        <to usec="0" sec="1570683887"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.73.226.28"/>
        </slice>
        <from usec="0" sec="1570683601"/>
        <to usec="0" sec="1570683888"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="133.4.143.230"/>
        </slice>
        <from usec="0" sec="1570683601"/>
        <to usec="0" sec="1570683888"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="52.49.83.172"/>
        </slice>
        <from usec="0" sec="1570683601"/>
        <to usec="0" sec="1570683884"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="123.78.219.225"/>
        </slice>
        <from usec="0" sec="1570683602"/>
        <to usec="0" sec="1570683886"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="49.102.104.153"/>
        </slice>
        <from usec="0" sec="1570683602"/>
        <to usec="0" sec="1570683887"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="144.15.247.144"/>
        </slice>
        <from usec="0" sec="1570683603"/>
        <to usec="0" sec="1570683884"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="178.169.229.165"/>
        </slice>
        <from usec="0" sec="1570683603"/>
        <to usec="0" sec="1570683885"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.244.161.125"/>
        </slice>
        <from usec="0" sec="1570683603"/>
        <to usec="0" sec="1570683875"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.4.255.241"/>
        </slice>
        <from usec="0" sec="1570683604"/>
        <to usec="0" sec="1570683725"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="52.161.3.85"/>
        </slice>
        <from usec="0" sec="1570683604"/>
        <to usec="0" sec="1570683888"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="146.72.63.228"/>
        </slice>
        <from usec="0" sec="1570683605"/>
        <to usec="0" sec="1570683879"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="173.194.209.29"/>
        </slice>
        <from usec="0" sec="1570683605"/>
        <to usec="0" sec="1570683887"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="45.227.205.224"/>
        </slice>
        <from usec="0" sec="1570683608"/>
        <to usec="0" sec="1570684158"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.182.60.96"/>
        </slice>
        <from usec="0" sec="1570683614"/>
        <to usec="0" sec="1570683875"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="112.144.30.49"/>
        </slice>
        <from usec="0" sec="1570683616"/>
        <to usec="0" sec="1570683873"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="172.151.116.83"/>
        </slice>
        <from usec="0" sec="1570683625"/>
        <to usec="0" sec="1570683804"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="183.151.27.15"/>
        </slice>
        <from usec="0" sec="1570683628"/>
        <to usec="0" sec="1570683831"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.4.174.96"/>
        </slice>
        <from usec="0" sec="1570683656"/>
        <to usec="0" sec="1570683885"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.47.244.251"/>
        </slice>
        <from usec="0" sec="1570683657"/>
        <to usec="0" sec="1570683749"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="181.76.47.132"/>
        </slice>
        <from usec="0" sec="1570683659"/>
        <to usec="0" sec="1570683750"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="52.56.4.83"/>
        </slice>
        <from usec="0" sec="1570683729"/>
        <to usec="0" sec="1570683775"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="92.247.167.201"/>
        </slice>
        <from usec="0" sec="1570683796"/>
        <to usec="0" sec="1570683888"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.195.246.160"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683978"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="47.246.187.126"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683946"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="5.125.128.172"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683977"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="222.155.160.174"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683978"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="172.148.243.241"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683978"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="23.188.7.7"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683977"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.4.154.8" dst_port="53"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683976"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="163.195.160.122" dst_ip="142.146.50.114" src_port="3702"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683974"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="139.157.17.213"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683978"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.4.254.32"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683975"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="144.40.210.218"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683978"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.195.41.232" dst_ip="163.195.67.122" dst_port="443"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683978"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="45.169.3.142"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683972"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.195.208.131"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683970"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.142.149.10"/>
        </slice>
        <from usec="0" sec="1570683601"/>
        <to usec="0" sec="1570683977"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="208.188.192.63"/>
        </slice>
        <from usec="0" sec="1570683601"/>
        <to usec="0" sec="1570683978"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.4.168.198"/>
        </slice>
        <from usec="0" sec="1570683603"/>
        <to usec="0" sec="1570683977"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="185.104.221.11"/>
        </slice>
        <from usec="0" sec="1570683604"/>
        <to usec="0" sec="1570683978"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="115.194.25.111"/>
        </slice>
        <from usec="0" sec="1570683604"/>
        <to usec="0" sec="1570683978"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.4.238.76"/>
        </slice>
        <from usec="0" sec="1570683604"/>
        <to usec="0" sec="1570683953"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="190.104.30.50"/>
        </slice>
        <from usec="0" sec="1570683607"/>
        <to usec="0" sec="1570683977"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.244.163.99"/>
        </slice>
        <from usec="0" sec="1570683607"/>
        <to usec="0" sec="1570683971"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.47.153.85"/>
        </slice>
        <from usec="0" sec="1570683611"/>
        <to usec="0" sec="1570683888"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.244.161.125"/>
        </slice>
        <from usec="0" sec="1570683615"/>
        <to usec="0" sec="1570683973"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.4.169.191" dst_port="80"/>
        </slice>
        <from usec="0" sec="1570683616"/>
        <to usec="0" sec="1570683944"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="106.231.110.23"/>
        </slice>
        <from usec="0" sec="1570683643"/>
        <to usec="0" sec="1570683945"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="46.228.86.234"/>
        </slice>
        <from usec="0" sec="1570683652"/>
        <to usec="0" sec="1570683969"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="31.116.229.199"/>
        </slice>
        <from usec="0" sec="1570683749"/>
        <to usec="0" sec="1570683975"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="36.151.153.143"/>
        </slice>
        <from usec="0" sec="1570683782"/>
        <to usec="0" sec="1570683948"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="34.14.119.45"/>
        </slice>
        <from usec="0" sec="1570683908"/>
        <to usec="0" sec="1570683926"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="104.41.152.37"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570684138"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.195.158.102"/>
        </slice>
        <from usec="0" sec="1570683601"/>
        <to usec="0" sec="1570684158"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.195.1.113"/>
        </slice>
        <from usec="0" sec="1570683601"/>
        <to usec="0" sec="1570684146"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.195.159.108"/>
        </slice>
        <from usec="0" sec="1570683603"/>
        <to usec="0" sec="1570684158"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="1.92.187.184"/>
        </slice>
        <from usec="0" sec="1570683603"/>
        <to usec="0" sec="1570684145"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="14.163.225.124"/>
        </slice>
        <from usec="0" sec="1570683605"/>
        <to usec="0" sec="1570684130"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.195.223.217"/>
        </slice>
        <from usec="0" sec="1570683614"/>
        <to usec="0" sec="1570684155"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="89.244.169.193"/>
        </slice>
        <from usec="0" sec="1570683616"/>
        <to usec="0" sec="1570684157"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="46.228.86.252"/>
        </slice>
        <from usec="0" sec="1570683747"/>
        <to usec="0" sec="1570684155"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="216.246.3.81"/>
        </slice>
        <from usec="0" sec="1570683927"/>
        <to usec="0" sec="1570684157"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="218.147.161.40"/>
        </slice>
        <from usec="0" sec="1570683606"/>
        <to usec="0" sec="1570684248"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="104.90.228.86"/>
        </slice>
        <from usec="0" sec="1570683661"/>
        <to usec="0" sec="1570684074"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="71.166.214.26"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570684338"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="17.253.103.116"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570684338"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="124.92.53.113"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570684311"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="61.56.194.159"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570684331"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.195.215.181"/>
        </slice>
        <from usec="0" sec="1570683603"/>
        <to usec="0" sec="1570684336"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="114.217.141.183"/>
        </slice>
        <from usec="0" sec="1570683603"/>
        <to usec="0" sec="1570684336"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="36.28.229.78"/>
        </slice>
        <from usec="0" sec="1570683603"/>
        <to usec="0" sec="1570684338"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="36.21.106.62"/>
        </slice>
        <from usec="0" sec="1570683605"/>
        <to usec="0" sec="1570684337"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="1.87.9.248"/>
        </slice>
        <from usec="0" sec="1570683606"/>
        <to usec="0" sec="1570684331"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="92.247.167.214"/>
        </slice>
        <from usec="0" sec="1570683607"/>
        <to usec="0" sec="1570684328"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="113.218.147.187"/>
        </slice>
        <from usec="0" sec="1570683611"/>
        <to usec="0" sec="1570684333"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="122.11.135.36"/>
        </slice>
        <from usec="0" sec="1570683611"/>
        <to usec="0" sec="1570684335"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="13.24.174.140"/>
        </slice>
        <from usec="0" sec="1570683620"/>
        <to usec="0" sec="1570684305"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.195.215.222"/>
        </slice>
        <from usec="0" sec="1570683646"/>
        <to usec="0" sec="1570684323"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="124.81.11.77"/>
        </slice>
        <from usec="0" sec="1570684202"/>
        <to usec="0" sec="1570684253"/>
    </anomaly>
    <anomaly type="notice" value="0.422026,1.46318,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="118.88.170.26"/>
        </slice>
        <from usec="0" sec="1570683616"/>
        <to usec="0" sec="1570684422"/>
    </anomaly>
    <anomaly type="notice" value="0.900822,1.53826,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683888"/>
    </anomaly>
    <anomaly type="notice" value="0.900822,1.53826,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683888"/>
    </anomaly>
    <anomaly type="notice" value="0.893509,1.55371,999,0 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.195.232.150" src_port="60829"/>
            <filter src_ip="163.195.232.150" dst_port="7680"/>
            <filter src_ip="163.195.232.150" dst_port="443"/>
        </slice>
        <from usec="0" sec="1570683613"/>
        <to usec="0" sec="1570683878"/>
    </anomaly>
    <anomaly type="notice" value="0.893509,1.55371,010,0 0 0 1 1 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="5.118.219.74" dst_port="22"/>
        </slice>
        <from usec="0" sec="1570683660"/>
        <to usec="0" sec="1570683888"/>
    </anomaly>
    <anomaly type="notice" value="0.893509,1.55371,010,0 0 0 1 1 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="139.157.9.221" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683978"/>
    </anomaly>
    <anomaly type="notice" value="0.893509,1.55371,010,0 0 0 1 1 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="193.31.88.242" dst_port="53"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683978"/>
    </anomaly>
    <anomaly type="notice" value="0.893509,1.55371,010,0 0 0 1 1 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="112.32.220.167" src_port="31877" dst_port="23"/>
            <filter src_ip="112.32.220.167" src_port="31877" dst_port="2323"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683978"/>
    </anomaly>
    <anomaly type="notice" value="0.893509,1.55371,999,0 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.195.95.155" dst_port="53"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683971"/>
    </anomaly>
    <anomaly type="notice" value="0.893509,1.55371,504,0 0 0 1 1 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="104.92.237.245" dst_ip="202.244.165.45"/>
            <filter src_ip="104.92.237.245" src_port="80"/>
            <filter dst_ip="203.142.139.228" src_port="80"/>
            <filter dst_ip="202.244.165.45" src_port="443"/>
            <filter dst_ip="202.244.165.45" src_port="80"/>
            <filter src_ip="104.92.237.245" dst_ip="203.142.139.228" src_port="443"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570684157"/>
    </anomaly>
    <anomaly type="notice" value="0.893509,1.55371,502,0 0 0 1 1 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="193.133.114.194" dst_ip="203.142.141.186" dst_port="22"/>
        </slice>
        <from usec="0" sec="1570683625"/>
        <to usec="0" sec="1570684035"/>
    </anomaly>
    <anomaly type="notice" value="0.893509,1.55371,502,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="218.59.7.114" dst_ip="133.182.103.227" dst_port="22"/>
            <filter src_ip="218.59.7.114" dst_ip="133.182.110.7" dst_port="22"/>
            <filter src_ip="218.59.7.114" dst_ip="133.182.106.0" dst_port="22"/>
            <filter src_ip="218.59.7.114" dst_ip="203.142.139.228" dst_port="22"/>
        </slice>
        <from usec="0" sec="1570683613"/>
        <to usec="0" sec="1570684148"/>
    </anomaly>
    <anomaly type="notice" value="0.893509,1.55371,504,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.195.155.147" dst_ip="84.239.71.218" dst_port="443"/>
            <filter src_ip="163.195.155.147" dst_ip="185.225.55.66" dst_port="443"/>
        </slice>
        <from usec="0" sec="1570683623"/>
        <to usec="0" sec="1570684148"/>
    </anomaly>
    <anomaly type="notice" value="0.630972,1.46362,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="133.182.71.119" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.893509,1.55371,010,0 0 0 1 1 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="121.128.56.37" src_port="53551" dst_port="23"/>
        </slice>
        <from usec="0" sec="1570683607"/>
        <to usec="0" sec="1570684338"/>
    </anomaly>
    <anomaly type="notice" value="0.943589,1.5239,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="24.100.27.238" dst_port="47808"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683646"/>
    </anomaly>
    <anomaly type="notice" value="0.943589,1.5239,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="159.211.214.8" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683646"/>
    </anomaly>
    <anomaly type="notice" value="0.943589,1.5239,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="89.244.166.129" dst_port="7746"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683646"/>
    </anomaly>
    <anomaly type="notice" value="0.943589,1.5239,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="89.244.166.129" dst_port="7753"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683646"/>
    </anomaly>
    <anomaly type="notice" value="0.943589,1.5239,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="89.244.166.129" dst_port="7756"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683646"/>
    </anomaly>
    <anomaly type="notice" value="0.943589,1.5239,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="89.244.166.129" dst_port="7758"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683646"/>
    </anomaly>
    <anomaly type="notice" value="0.943589,1.5239,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_port="5816" dst_port="2101"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570683646"/>
    </anomaly>
    <anomaly type="notice" value="0.943589,1.5239,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="89.244.166.129"/>
        </slice>
        <from usec="0" sec="1570683735"/>
        <to usec="0" sec="1570683781"/>
    </anomaly>
    <anomaly type="notice" value="0.943589,1.5239,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="154.21.116.117"/>
        </slice>
        <from usec="0" sec="1570683735"/>
        <to usec="0" sec="1570683781"/>
    </anomaly>
    <anomaly type="notice" value="0.943589,1.5239,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="13.129.177.201"/>
        </slice>
        <from usec="0" sec="1570683825"/>
        <to usec="0" sec="1570683871"/>
    </anomaly>
    <anomaly type="notice" value="0.943589,1.5239,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="163.195.200.193"/>
        </slice>
        <from usec="0" sec="1570683825"/>
        <to usec="0" sec="1570683871"/>
    </anomaly>
    <anomaly type="notice" value="0.943589,1.5239,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="52.251.211.83"/>
        </slice>
        <from usec="0" sec="1570683825"/>
        <to usec="0" sec="1570683871"/>
    </anomaly>
    <anomaly type="notice" value="0.93661,1.53949,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.142.159.86" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1570683600"/>
        <to usec="0" sec="1570684334"/>
    </anomaly>
    <anomaly type="notice" value="0.943589,1.5239,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="192.104.199.250" dst_ip="117.132.228.46" src_port="53"/>
            <filter src_ip="192.104.199.213" dst_ip="117.132.228.46" src_port="53"/>
        </slice>
        <from usec="0" sec="1570683870"/>
        <to usec="0" sec="1570683961"/>
    </anomaly>
    <anomaly type="notice" value="0.943589,1.5239,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="89.244.166.129" src_port="40714"/>
        </slice>
        <from usec="0" sec="1570683960"/>
        <to usec="0" sec="1570684006"/>
    </anomaly>
    <anomaly type="notice" value="0.943589,1.5239,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="89.244.166.129" dst_port="7756"/>
        </slice>
        <from usec="0" sec="1570684095"/>
        <to usec="0" sec="1570684141"/>
    </anomaly>
    <anomaly type="notice" value="0.93661,1.53949,020,0 0 0 1 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="52.206.158.189"/>
            <filter dst_ip="185.114.228.66"/>
        </slice>
        <from usec="0" sec="1570683602"/>
        <to usec="0" sec="1570684232"/>
    </anomaly>
    <anomaly type="notice" value="0.93661,1.53949,020,0 0 0 1 0 0 1 0 0 0 0 0,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="172.51.112.114"/>
            <filter dst_ip="18.113.182.208"/>
        </slice>
        <from usec="0" sec="1570683601"/>
        <to usec="0" sec="1570684186"/>
    </anomaly>
    <anomaly type="notice" value="0.630972,1.46362,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="128.56.30.168"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.630972,1.46362,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="133.4.82.181" src_port="3389"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.630972,1.46362,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="13.156.131.64"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.630972,1.46362,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="151.100.35.60"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.630972,1.46362,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="163.195.170.203" dst_ip="192.104.132.111" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.785901,1.48749,503,1 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="203.142.156.86" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.630972,1.46362,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="211.214.251.48"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.630972,1.46362,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="118.231.40.95"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.630972,1.46362,010,0 0 0 0 0 0 0 0 0 1 0 0,sntscSYN">
        <slice>
            <filter src_ip="51.87.197.135"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.630972,1.46362,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="60.141.125.162"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.630972,1.46362,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="126.128.138.166" dst_ip="163.195.108.136" dst_port="993"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.630972,1.46362,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="133.182.5.253" src_port="443"/>
            <filter dst_ip="133.182.5.253" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.932862,1.5205,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="163.195.204.90" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.630972,1.46362,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="142.146.50.114" dst_ip="163.195.63.30" dst_port="3702"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.630972,1.46362,011,0 0 0 0 0 0 0 0 0 1 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="185.114.228.197" src_port="42244" dst_port="59591"/>
            <filter dst_ip="185.114.228.197" src_port="42245" dst_port="59591"/>
            <filter dst_ip="185.114.228.197" src_port="42246" dst_port="59591"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.630972,1.46362,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="185.33.103.209"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.630972,1.46362,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="192.66.100.98"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.630972,1.46362,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="202.244.163.228" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.630972,1.46362,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="202.244.163.49" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.630972,1.46362,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="203.142.145.30" dst_port="25"/>
            <filter src_ip="198.154.48.60" dst_ip="203.142.145.30" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.620488,1.47985,999,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="163.195.94.157" dst_port="53"/>
            <filter dst_ip="202.244.161.125" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.630972,1.46362,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="51.25.209.225"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.630972,1.46362,010,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="17.253.100.8" src_port="21"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.630972,1.46362,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="52.135.167.62"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.630972,1.46362,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="202.244.161.125"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.630972,1.46362,020,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="64.26.216.117"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.630972,1.46362,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="70.135.158.211"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.932862,1.5205,504,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="104.25.97.147" dst_ip="173.62.67.46" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.932862,1.5205,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="126.188.74.129" dst_ip="203.142.154.167" src_port="47708" dst_port="3010"/>
            <filter src_ip="126.188.74.129" dst_ip="203.142.154.167" src_port="43521" dst_port="3010"/>
            <filter src_ip="126.188.74.129" dst_ip="203.142.154.167" src_port="40360" dst_port="41798"/>
            <filter src_ip="126.188.74.129" dst_ip="203.142.154.167" src_port="38849" dst_port="37598"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.932862,1.5205,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="13.30.66.251" dst_ip="163.195.15.141" src_port="443" dst_port="43390"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.932862,1.5205,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="13.158.73.189" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.932862,1.5205,010,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="185.166.236.1" src_port="55536"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.932862,1.5205,010,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="203.142.139.228" dst_port="54756"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.932862,1.5205,503,0 0 0 0 0 0 0 0 0 1 1 0,mptplaHTTP">
        <slice>
            <filter dst_ip="15.72.252.49" src_port="80"/>
            <filter src_ip="23.34.237.245" dst_ip="15.72.252.49" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.932862,1.5205,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="203.142.145.30" dst_ip="198.154.48.60" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.932862,1.5205,504,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="202.244.163.63" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.932862,1.5205,999,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="202.248.150.245" dst_port="25"/>
            <filter dst_ip="202.248.150.245" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.932862,1.5205,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="121.146.140.139" dst_ip="203.142.146.233" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.932862,1.5205,999,0 0 0 0 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter src_ip="133.4.143.75" dst_ip="220.187.210.113" src_port="6881" dst_port="8565"/>
            <filter src_ip="203.142.159.114" dst_ip="220.187.210.113" src_port="60217" dst_port="8565"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.932862,1.5205,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="163.195.197.45" dst_ip="54.44.52.90" src_port="51003" dst_port="443"/>
            <filter src_ip="163.195.197.45" dst_ip="54.44.52.90" src_port="50981" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.925802,1.53612,020,0 0 0 1 0 0 0 0 0 1 1 0,ntscICec">
        <slice>
            <filter src_ip="203.142.154.143"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
