<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="suspicious" value="0.931118,1.28474,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="87.20.72.62" dst_port="22"/>
        </slice>
        <from usec="0" sec="1588654826"/>
        <to usec="0" sec="1588655585"/>
    </anomaly>
    <anomaly type="suspicious" value="0.931118,1.28474,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="103.211.0.205"/>
        </slice>
        <from usec="0" sec="1588655276"/>
        <to usec="0" sec="1588655575"/>
    </anomaly>
    <anomaly type="suspicious" value="0.931118,1.28474,502,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="213.39.196.128" dst_ip="203.82.200.169" src_port="61633" dst_port="22"/>
        </slice>
        <from usec="0" sec="1588655351"/>
        <to usec="0" sec="1588655355"/>
    </anomaly>
    <anomaly type="suspicious" value="1.2008,1.22522,503,1 1 1 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="126.98.246.246" dst_ip="163.43.248.235" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.931118,1.28474,503,1 1 1 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="163.43.3.50" dst_ip="38.85.122.24" src_port="58172" dst_port="80"/>
            <filter src_ip="163.43.73.77" dst_ip="38.85.122.24" src_port="60476" dst_port="80"/>
        </slice>
        <from usec="0" sec="1588655122"/>
        <to usec="0" sec="1588655123"/>
    </anomaly>
    <anomaly type="suspicious" value="0.931118,1.28474,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="188.80.142.137"/>
        </slice>
        <from usec="0" sec="1588654841"/>
        <to usec="0" sec="1588654842"/>
    </anomaly>
    <anomaly type="suspicious" value="0.931118,1.28474,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.102.188.37" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1588654817"/>
        <to usec="0" sec="1588655348"/>
    </anomaly>
    <anomaly type="suspicious" value="0.931118,1.28474,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="212.127.223.207" src_port="5065" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1588655601"/>
        <to usec="0" sec="1588655603"/>
    </anomaly>
    <anomaly type="suspicious" value="0.931118,1.28474,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="77.27.110.245" src_port="59336" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1588654927"/>
        <to usec="0" sec="1588654928"/>
    </anomaly>
    <anomaly type="suspicious" value="0.931118,1.28474,010,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="78.120.181.252" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1588655208"/>
        <to usec="0" sec="1588655697"/>
    </anomaly>
    <anomaly type="suspicious" value="0.931118,1.28474,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="218.40.54.182" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1588654916"/>
        <to usec="0" sec="1588654919"/>
    </anomaly>
    <anomaly type="suspicious" value="0.931118,1.28474,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="183.229.229.75" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1588655695"/>
        <to usec="0" sec="1588655699"/>
    </anomaly>
    <anomaly type="suspicious" value="0.931118,1.28474,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="112.20.170.123" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1588655467"/>
        <to usec="0" sec="1588655469"/>
    </anomaly>
    <anomaly type="suspicious" value="0.931118,1.28474,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="116.200.57.193" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1588655248"/>
        <to usec="0" sec="1588655253"/>
    </anomaly>
    <anomaly type="suspicious" value="1.04356,1.24978,010,1 1 1 0 0 0 0 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="89.22.215.3" dst_port="8449"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.931118,1.28474,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="164.68.107.107" dst_port="445"/>
        </slice>
        <from usec="0" sec="1588655203"/>
        <to usec="0" sec="1588655206"/>
    </anomaly>
    <anomaly type="suspicious" value="0.931118,1.28474,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYN139445">
        <slice>
            <filter src_ip="162.131.200.95" dst_port="445"/>
        </slice>
        <from usec="0" sec="1588655649"/>
        <to usec="0" sec="1588655652"/>
    </anomaly>
    <anomaly type="suspicious" value="0.931118,1.28474,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="188.170.77.20" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1588654961"/>
        <to usec="0" sec="1588655502"/>
    </anomaly>
    <anomaly type="suspicious" value="0.931118,1.28474,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.86.61.14" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1588654951"/>
        <to usec="0" sec="1588655619"/>
    </anomaly>
    <anomaly type="suspicious" value="0.931118,1.28474,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.86.61.15" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1588655007"/>
        <to usec="0" sec="1588655085"/>
    </anomaly>
    <anomaly type="suspicious" value="0.931118,1.28474,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.86.61.11" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1588655324"/>
        <to usec="0" sec="1588655515"/>
    </anomaly>
    <anomaly type="suspicious" value="0.931118,1.28474,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="188.170.73.6" dst_port="1900"/>
        </slice>
        <from usec="0" sec="1588655506"/>
        <to usec="0" sec="1588655690"/>
    </anomaly>
    <anomaly type="suspicious" value="0.931118,1.28474,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="183.67.101.40"/>
        </slice>
        <from usec="0" sec="1588655528"/>
        <to usec="0" sec="1588655530"/>
    </anomaly>
    <anomaly type="suspicious" value="1.02697,1.15038,504,1 1 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="202.8.6.223" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.994339,1.3377,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1588654800"/>
        <to usec="0" sec="1588655538"/>
    </anomaly>
    <anomaly type="suspicious" value="0.994339,1.3377,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1588654800"/>
        <to usec="0" sec="1588655448"/>
    </anomaly>
    <anomaly type="suspicious" value="0.994339,1.3377,901,0 0 0 0 0 1 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1588654800"/>
        <to usec="0" sec="1588655538"/>
    </anomaly>
    <anomaly type="suspicious" value="0.994339,1.3377,901,0 0 0 0 0 1 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1588654800"/>
        <to usec="0" sec="1588655448"/>
    </anomaly>
    <anomaly type="suspicious" value="1.14611,1.15455,999,1 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="163.43.26.254" dst_ip="206.213.176.18" src_port="49612" dst_port="1194"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.2008,1.22522,999,1 1 1 0 0 0 0 0 0 1 1 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.86.61.10" dst_port="5351"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.14611,1.15455,999,1 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.43.26.254"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09863,1.20208,503,0 0 0 0 0 0 0 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="163.43.202.230" src_port="80"/>
            <filter src_ip="163.43.202.230" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09863,1.20208,504,0 0 0 0 0 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="202.8.4.19" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09863,1.20208,999,0 0 0 0 0 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="203.82.195.72" src_port="80"/>
            <filter src_ip="203.82.195.72"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09863,1.20208,504,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="104.38.56.194" dst_ip="163.43.7.179" src_port="80" dst_port="49665"/>
            <filter src_ip="104.38.56.194" dst_ip="163.43.7.179" src_port="80" dst_port="49664"/>
            <filter src_ip="104.38.56.194" dst_ip="163.43.7.179" src_port="443" dst_port="49666"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09863,1.20208,999,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="203.82.195.88" dst_port="3010"/>
            <filter dst_ip="203.82.195.88"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.874055,1.16324,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="202.8.0.105" dst_ip="126.93.57.196" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09863,1.20208,503,0 0 0 0 0 0 0 0 0 1 1 1,alphflHTTP">
        <slice>
            <filter src_ip="163.43.248.235" dst_ip="126.98.246.246" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.874055,1.16324,999,0 0 0 0 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter src_ip="203.136.31.214" dst_ip="149.21.253.143" src_port="11971" dst_port="873"/>
            <filter src_ip="203.136.31.213" dst_ip="149.21.253.143" src_port="17640" dst_port="873"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09863,1.20208,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.43.146.197" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09863,1.20208,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.43.146.142" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09863,1.20208,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.43.36.83" src_port="5004"/>
            <filter src_ip="151.120.144.30" dst_ip="163.43.36.83" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09863,1.20208,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.43.103.119" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.09863,1.20208,999,0 0 0 0 0 0 0 0 0 1 1 1,ptmpla">
        <slice>
            <filter src_ip="203.82.195.88" src_port="3010"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.90578,1.49457,010,1 1 1 1 1 1 0 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="87.20.72.7" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.90578,1.49457,999,1 1 1 1 1 1 0 0 0 1 1 1,ntscUDPOther">
        <slice>
            <filter src_ip="45.15.82.194" src_port="54110" dst_port="123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.83553,1.47898,010,1 1 1 1 1 1 1 0 0 1 1 0,ntscSYN">
        <slice>
            <filter src_ip="95.46.39.55" src_port="20909" dst_port="22"/>
            <filter src_ip="95.46.39.55" src_port="29057" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.37293,1.26216,010,1 1 1 0 0 0 0 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="103.4.216.187" src_port="55067" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.37293,1.26216,999,1 1 1 0 0 0 0 0 0 1 1 1,ipv4gretun">
        <slice>
            <filter src_ip="203.82.202.199" dst_ip="206.220.227.1"/>
            <filter src_ip="203.82.202.199" dst_ip="204.36.166.28"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.73675,1.49939,999,1 1 1 1 1 1 1 0 0 1 0 0,ntscUDPDNS">
        <slice>
            <filter src_ip="62.210.106.96" src_port="39831" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.77038,1.45987,011,0 0 0 1 1 1 1 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="212.190.87.138" src_port="6379"/>
            <filter dst_ip="34.40.202.155"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.71874,1.4442,504,0 0 0 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.43.7.7" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.94448,3.37318,999,1 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.82.198.71" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1588654800"/>
        <to usec="0" sec="1588655701"/>
    </anomaly>
    <anomaly type="anomalous" value="1.77038,1.45987,010,0 0 0 1 1 1 1 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="178.191.202.146" src_port="55338" dst_port="2022"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.95249,1.50972,999,1 1 1 1 1 1 1 0 0 1 1 1,mptpla">
        <slice>
            <filter dst_ip="52.241.244.146" src_port="1194"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="4.0167,3.35096,999,1 0 0 0 0 0 1 1 1 1 1 0,mptpla">
        <slice>
            <filter dst_ip="104.7.121.103" src_port="1194"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.71874,1.4442,504,0 0 0 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="203.82.195.86" dst_port="22"/>
            <filter dst_ip="203.82.195.86"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.37293,1.26216,503,1 1 1 0 0 0 0 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="163.43.202.230" dst_port="80"/>
            <filter dst_ip="163.43.202.230" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.74947,1.40488,999,1 0 0 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="203.82.195.72"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.74947,1.40488,503,1 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="203.82.196.79" src_port="80"/>
            <filter src_ip="203.82.202.16" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.90578,1.49457,504,1 1 1 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.43.26.210" src_port="443"/>
            <filter dst_ip="163.43.26.210" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.95249,1.50972,999,1 1 1 1 1 1 1 0 0 1 1 1,ntscUDPOther">
        <slice>
            <filter src_ip="80.82.77.117" dst_port="120"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.77038,1.45987,010,0 0 0 1 1 1 1 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="134.208.116.242" src_port="54292" dst_port="2525"/>
            <filter src_ip="134.208.116.242" src_port="54292" dst_port="2526"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.95249,1.50972,010,1 1 1 1 1 1 1 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="194.29.226.138" src_port="58256"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.80023,1.42098,503,1 0 0 1 1 1 1 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="203.82.196.79" dst_port="80"/>
            <filter dst_ip="203.82.202.16" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.2812,1.20222,504,1 0 0 1 0 0 1 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.43.147.151" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.71874,1.4442,503,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_port="80"/>
            <filter dst_ip="163.43.243.31" src_port="443"/>
            <filter dst_ip="203.82.207.118" src_port="443"/>
            <filter dst_ip="203.82.207.118" dst_port="25"/>
            <filter dst_ip="133.53.252.10" dst_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
