<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="notice" value="0.329268,1.12232,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420338"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420158"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="198.146.188.214"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419708"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="178.174.234.190"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419708"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="172.119.210.104"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419707"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,502,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.90.137.68" dst_port="22"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420158"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="92.142.191.242"/>
        </slice>
        <from usec="0" sec="1591420265"/>
        <to usec="0" sec="1591420365"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,011,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="80.162.190.182" dst_port="52990"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420338"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="208.217.72.110"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419798"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.235.182.161" src_port="53"/>
            <filter src_ip="133.235.182.161" src_port="22"/>
            <filter src_ip="133.235.182.161"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420248"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.235.208.58"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419784"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="60.249.162.205" dst_port="445"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419798"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="212.45.76.61"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420245"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="211.164.41.32"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419797"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="58.153.255.201"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591419978"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="203.90.148.35" dst_ip="133.253.113.179" src_port="53"/>
            <filter src_ip="223.185.119.62" dst_ip="133.253.113.179" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591419798"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.172.232.126"/>
        </slice>
        <from usec="0" sec="1591419609"/>
        <to usec="0" sec="1591419797"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter src_ip="124.69.246.62"/>
        </slice>
        <from usec="0" sec="1591419724"/>
        <to usec="0" sec="1591419735"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="185.135.153.229"/>
        </slice>
        <from usec="0" sec="1591419748"/>
        <to usec="0" sec="1591419795"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="126.76.245.174"/>
        </slice>
        <from usec="0" sec="1591419771"/>
        <to usec="0" sec="1591419777"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="113.3.194.30"/>
        </slice>
        <from usec="0" sec="1591419790"/>
        <to usec="0" sec="1591419798"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="195.153.95.42" dst_port="59446"/>
            <filter dst_ip="195.153.95.42"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419888"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="114.83.253.182" dst_ip="133.253.121.65" src_port="60000"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419978"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="51.155.0.96" src_port="8545" dst_port="32767"/>
            <filter dst_ip="51.155.0.96"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419888"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="163.220.244.241"/>
            <filter src_ip="176.1.213.142" dst_port="3702"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419888"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,502,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.90.133.38" dst_port="22"/>
            <filter dst_ip="203.90.133.38" dst_port="443"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419888"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,011,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="195.153.94.213" src_port="4547" dst_port="59422"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419888"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="140.213.49.54"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419879"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="203.90.148.35" dst_ip="133.253.64.163" src_port="53"/>
            <filter src_ip="223.185.119.62" dst_ip="133.253.64.163" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419888"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,011,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="104.197.117.252"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419888"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="203.90.148.35" dst_ip="133.253.68.61" src_port="53"/>
            <filter src_ip="223.185.119.62" dst_ip="133.253.68.61" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419887"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="45.48.222.37"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419887"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.11.19.49" src_port="53"/>
            <filter dst_ip="202.11.19.49" dst_port="53"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419888"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="108.228.240.176"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591419888"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="212.45.72.94"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591419882"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="69.211.159.234"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591419871"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="223.185.119.62" dst_ip="133.253.69.152" src_port="53"/>
            <filter src_ip="203.90.148.35" dst_ip="133.253.69.152" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591419888"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="1.249.113.27" dst_ip="203.90.131.4" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420248"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,020,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="111.27.185.144"/>
        </slice>
        <from usec="0" sec="1591419603"/>
        <to usec="0" sec="1591419888"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.90.232.235"/>
        </slice>
        <from usec="0" sec="1591419603"/>
        <to usec="0" sec="1591419888"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="114.83.245.21" dst_ip="133.253.88.87" src_port="60000"/>
        </slice>
        <from usec="0" sec="1591419603"/>
        <to usec="0" sec="1591419886"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="180.51.103.32"/>
        </slice>
        <from usec="0" sec="1591419604"/>
        <to usec="0" sec="1591420066"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="121.55.70.83"/>
        </slice>
        <from usec="0" sec="1591419605"/>
        <to usec="0" sec="1591420155"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="13.137.24.183"/>
        </slice>
        <from usec="0" sec="1591419607"/>
        <to usec="0" sec="1591419865"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="52.176.232.175"/>
        </slice>
        <from usec="0" sec="1591419610"/>
        <to usec="0" sec="1591419871"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="163.178.57.4"/>
        </slice>
        <from usec="0" sec="1591419613"/>
        <to usec="0" sec="1591419883"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="52.198.195.236"/>
        </slice>
        <from usec="0" sec="1591419613"/>
        <to usec="0" sec="1591419888"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="94.234.167.9"/>
        </slice>
        <from usec="0" sec="1591419634"/>
        <to usec="0" sec="1591419756"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="109.18.150.100"/>
        </slice>
        <from usec="0" sec="1591419641"/>
        <to usec="0" sec="1591419847"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="72.98.5.95"/>
        </slice>
        <from usec="0" sec="1591419767"/>
        <to usec="0" sec="1591419828"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="62.222.170.217"/>
        </slice>
        <from usec="0" sec="1591419768"/>
        <to usec="0" sec="1591419773"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="78.126.108.110"/>
        </slice>
        <from usec="0" sec="1591419790"/>
        <to usec="0" sec="1591419798"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="52.203.120.87"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419978"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.220.208.125" src_port="5004"/>
            <filter dst_ip="163.220.208.125" src_port="33434"/>
            <filter dst_ip="163.220.208.125" src_port="443"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419978"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="114.237.178.117" dst_ip="133.253.219.144" src_port="53"/>
            <filter src_ip="101.1.251.249" dst_ip="133.253.219.144" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419978"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="167.156.142.71"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419978"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,011,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="103.41.245.33" src_port="445"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419978"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="14.93.240.19"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419954"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="50.245.232.219" src_port="47311" dst_port="20322"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419977"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="3.81.235.214"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419977"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="204.115.107.202"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420143"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="13.196.200.22"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591419959"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="193.233.157.87"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591419978"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.90.148.35"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591419974"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="109.155.73.128"/>
        </slice>
        <from usec="0" sec="1591419602"/>
        <to usec="0" sec="1591419965"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="71.249.41.86"/>
        </slice>
        <from usec="0" sec="1591419602"/>
        <to usec="0" sec="1591419976"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="52.60.154.123"/>
        </slice>
        <from usec="0" sec="1591419603"/>
        <to usec="0" sec="1591419975"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="114.83.244.10" dst_ip="133.253.104.163" src_port="60000"/>
        </slice>
        <from usec="0" sec="1591419603"/>
        <to usec="0" sec="1591419978"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="106.50.212.238"/>
        </slice>
        <from usec="0" sec="1591419603"/>
        <to usec="0" sec="1591420248"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="223.185.119.62" dst_ip="133.253.79.48" src_port="53"/>
            <filter src_ip="203.90.148.35" dst_ip="133.253.79.48" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419603"/>
        <to usec="0" sec="1591419977"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="167.3.3.176"/>
        </slice>
        <from usec="0" sec="1591419603"/>
        <to usec="0" sec="1591419946"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="114.83.244.10" dst_ip="123.112.120.131" src_port="60000"/>
        </slice>
        <from usec="0" sec="1591419605"/>
        <to usec="0" sec="1591419977"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="58.37.223.2"/>
        </slice>
        <from usec="0" sec="1591419616"/>
        <to usec="0" sec="1591419976"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="111.53.134.177"/>
        </slice>
        <from usec="0" sec="1591419656"/>
        <to usec="0" sec="1591419921"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.90.134.80"/>
        </slice>
        <from usec="0" sec="1591419895"/>
        <to usec="0" sec="1591419976"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="162.255.37.47"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420068"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="52.99.50.197"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420158"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="198.146.188.153"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420068"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,011,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="203.90.148.35" src_port="5943" dst_port="59680"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420068"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="159.195.23.148"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420068"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="114.83.253.182" dst_ip="133.253.93.208" src_port="60000"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420425"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.235.4.211"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420068"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="203.90.148.35" dst_ip="133.253.95.159" src_port="53"/>
            <filter src_ip="223.185.119.62" dst_ip="133.253.95.159" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420067"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="165.161.252.13" dst_ip="133.253.225.252" src_port="32766"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420068"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="54.169.127.60"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420068"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,011,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.90.131.87"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420063"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.32.241.24" dst_ip="163.220.113.129" src_port="53"/>
            <filter src_ip="203.90.148.35" dst_ip="163.220.113.129" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420068"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="58.175.220.202" dst_ip="133.253.103.30" dst_port="9999"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420068"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="114.83.245.58" dst_ip="133.253.102.48"/>
            <filter src_ip="114.83.245.58" src_port="60000"/>
            <filter dst_ip="133.253.102.48" src_port="60000"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420425"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="104.243.146.141" dst_port="53"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420065"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="223.185.119.62" dst_ip="133.253.96.230" src_port="53"/>
            <filter src_ip="203.90.148.35" dst_ip="133.253.96.230" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420427"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="165.0.199.62"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420067"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPICrp">
        <slice>
            <filter dst_ip="58.153.255.201"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420068"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="74.73.10.26"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420068"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="114.83.253.213" dst_ip="133.253.80.34" src_port="60000"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420068"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="18.149.67.96"/>
        </slice>
        <from usec="0" sec="1591419602"/>
        <to usec="0" sec="1591420068"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="111.14.193.13"/>
        </slice>
        <from usec="0" sec="1591419602"/>
        <to usec="0" sec="1591420068"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="203.90.148.35" dst_ip="133.253.195.171" src_port="53"/>
            <filter src_ip="168.32.241.24" dst_ip="133.253.195.171" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419603"/>
        <to usec="0" sec="1591420067"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="203.90.148.35" dst_ip="133.253.206.177" src_port="53"/>
            <filter src_ip="168.32.241.24" dst_ip="133.253.206.177" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419603"/>
        <to usec="0" sec="1591420068"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="39.101.220.211" dst_ip="133.253.205.194" src_port="80"/>
        </slice>
        <from usec="0" sec="1591419603"/>
        <to usec="0" sec="1591420424"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="114.83.245.26" dst_ip="133.253.72.67" src_port="60000"/>
        </slice>
        <from usec="0" sec="1591419603"/>
        <to usec="0" sec="1591420067"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="114.83.245.21" dst_ip="133.253.83.123" src_port="60000"/>
        </slice>
        <from usec="0" sec="1591419604"/>
        <to usec="0" sec="1591420067"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="114.83.253.154" dst_ip="133.253.108.122" src_port="60000"/>
        </slice>
        <from usec="0" sec="1591419604"/>
        <to usec="0" sec="1591420158"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="114.154.209.60" src_port="32428" dst_port="23"/>
        </slice>
        <from usec="0" sec="1591419605"/>
        <to usec="0" sec="1591420068"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="114.83.245.21" dst_ip="133.253.101.28" src_port="60000"/>
        </slice>
        <from usec="0" sec="1591419606"/>
        <to usec="0" sec="1591420068"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.90.138.201" dst_port="22"/>
        </slice>
        <from usec="0" sec="1591419607"/>
        <to usec="0" sec="1591420428"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="107.182.91.170"/>
        </slice>
        <from usec="0" sec="1591419613"/>
        <to usec="0" sec="1591420068"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.220.220.48"/>
        </slice>
        <from usec="0" sec="1591419614"/>
        <to usec="0" sec="1591420046"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="175.60.46.36"/>
        </slice>
        <from usec="0" sec="1591419615"/>
        <to usec="0" sec="1591420141"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.212.223.251"/>
        </slice>
        <from usec="0" sec="1591419616"/>
        <to usec="0" sec="1591420052"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.90.148.35"/>
        </slice>
        <from usec="0" sec="1591419627"/>
        <to usec="0" sec="1591420068"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="111.96.252.116"/>
        </slice>
        <from usec="0" sec="1591419661"/>
        <to usec="0" sec="1591420156"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="13.28.13.32"/>
        </slice>
        <from usec="0" sec="1591419931"/>
        <to usec="0" sec="1591420114"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="194.131.74.160"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420158"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,011,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="185.105.157.81" src_port="3389" dst_port="56131"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420158"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="203.149.8.204"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420158"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="27.103.32.159" dst_port="1106"/>
            <filter dst_ip="27.103.32.159"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420158"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="114.83.253.182" dst_ip="27.35.76.34" src_port="60000"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420153"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="203.90.148.35" dst_ip="133.253.109.62" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420157"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="46.124.132.11"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420158"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPICterp">
        <slice>
            <filter dst_ip="213.127.101.37"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420158"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="203.90.148.35" dst_ip="133.253.105.193" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420158"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="203.90.148.35" dst_ip="133.253.114.82" src_port="53"/>
            <filter src_ip="223.185.119.62" dst_ip="133.253.114.82" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420156"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.90.135.37" dst_port="22"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420158"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,020,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="211.101.122.199"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420158"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="203.90.148.35" dst_ip="5.244.30.224" src_port="53"/>
            <filter src_ip="223.185.119.62" dst_ip="5.244.30.224" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420427"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.90.132.103" dst_port="22"/>
        </slice>
        <from usec="0" sec="1591419602"/>
        <to usec="0" sec="1591420158"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="133.118.54.7"/>
        </slice>
        <from usec="0" sec="1591419602"/>
        <to usec="0" sec="1591420158"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="185.84.6.123"/>
        </slice>
        <from usec="0" sec="1591419602"/>
        <to usec="0" sec="1591420158"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="114.83.253.201" dst_ip="133.253.122.251" src_port="60000"/>
        </slice>
        <from usec="0" sec="1591419603"/>
        <to usec="0" sec="1591420153"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="210.229.79.211"/>
        </slice>
        <from usec="0" sec="1591419603"/>
        <to usec="0" sec="1591420157"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="203.90.148.35" dst_ip="79.145.25.217" src_port="53"/>
            <filter src_ip="168.32.241.24" dst_ip="79.145.25.217" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419604"/>
        <to usec="0" sec="1591420157"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="126.252.208.216"/>
        </slice>
        <from usec="0" sec="1591419604"/>
        <to usec="0" sec="1591420156"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="203.90.148.35" dst_ip="133.253.88.161" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419604"/>
        <to usec="0" sec="1591420157"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="114.83.253.161" dst_ip="133.253.100.173" src_port="60000"/>
        </slice>
        <from usec="0" sec="1591419605"/>
        <to usec="0" sec="1591420156"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="198.83.178.194"/>
        </slice>
        <from usec="0" sec="1591419606"/>
        <to usec="0" sec="1591420147"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.11.4.231" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419607"/>
        <to usec="0" sec="1591420153"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.15.197.157"/>
        </slice>
        <from usec="0" sec="1591419608"/>
        <to usec="0" sec="1591420108"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.121.65.157"/>
        </slice>
        <from usec="0" sec="1591419612"/>
        <to usec="0" sec="1591420155"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="218.108.27.37"/>
        </slice>
        <from usec="0" sec="1591419620"/>
        <to usec="0" sec="1591420154"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="125.134.218.77"/>
        </slice>
        <from usec="0" sec="1591419624"/>
        <to usec="0" sec="1591420152"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="178.128.85.132"/>
        </slice>
        <from usec="0" sec="1591419713"/>
        <to usec="0" sec="1591420061"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.249.33.40"/>
        </slice>
        <from usec="0" sec="1591419736"/>
        <to usec="0" sec="1591420158"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="34.51.228.253"/>
        </slice>
        <from usec="0" sec="1591419841"/>
        <to usec="0" sec="1591420002"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="126.182.102.2"/>
        </slice>
        <from usec="0" sec="1591419889"/>
        <to usec="0" sec="1591420131"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="93.231.24.138"/>
        </slice>
        <from usec="0" sec="1591419919"/>
        <to usec="0" sec="1591420074"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="146.109.119.15"/>
        </slice>
        <from usec="0" sec="1591419937"/>
        <to usec="0" sec="1591420052"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="106.75.152.141"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420248"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="203.90.148.35"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420245"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="109.155.73.146" src_port="2379" dst_port="2379"/>
            <filter src_ip="109.155.73.146" src_port="119" dst_port="119"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420248"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="165.161.24.165"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420248"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="111.8.98.96"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420241"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="221.232.177.15"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420248"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="78.72.17.46"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420247"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="117.34.94.183"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420245"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="64.248.252.87"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420248"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,011,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="188.190.78.15"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420202"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="133.118.239.78"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420247"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="223.32.80.195"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420236"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="187.26.138.151"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420248"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="220.126.156.56"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420243"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="180.51.35.195"/>
        </slice>
        <from usec="0" sec="1591419602"/>
        <to usec="0" sec="1591420248"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.220.143.242"/>
        </slice>
        <from usec="0" sec="1591419603"/>
        <to usec="0" sec="1591420247"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="154.223.191.101"/>
        </slice>
        <from usec="0" sec="1591419603"/>
        <to usec="0" sec="1591420243"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="91.241.80.144"/>
        </slice>
        <from usec="0" sec="1591419603"/>
        <to usec="0" sec="1591420248"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.5.93.223" dst_ip="168.80.2.111" dst_port="443"/>
        </slice>
        <from usec="0" sec="1591419603"/>
        <to usec="0" sec="1591420321"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="114.83.244.5" dst_ip="133.253.64.198" src_port="60000"/>
        </slice>
        <from usec="0" sec="1591419604"/>
        <to usec="0" sec="1591420246"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="96.215.210.49"/>
        </slice>
        <from usec="0" sec="1591419604"/>
        <to usec="0" sec="1591420247"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="159.218.184.26"/>
        </slice>
        <from usec="0" sec="1591419604"/>
        <to usec="0" sec="1591420237"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="175.230.105.14"/>
        </slice>
        <from usec="0" sec="1591419604"/>
        <to usec="0" sec="1591420248"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="126.165.0.237"/>
        </slice>
        <from usec="0" sec="1591419605"/>
        <to usec="0" sec="1591420241"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="163.220.222.230" src_port="48242" dst_port="16106"/>
        </slice>
        <from usec="0" sec="1591419606"/>
        <to usec="0" sec="1591420238"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="36.25.145.111"/>
        </slice>
        <from usec="0" sec="1591419607"/>
        <to usec="0" sec="1591420246"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="220.113.75.113"/>
        </slice>
        <from usec="0" sec="1591419607"/>
        <to usec="0" sec="1591420248"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="123.233.144.253"/>
        </slice>
        <from usec="0" sec="1591419608"/>
        <to usec="0" sec="1591420246"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="144.114.58.223"/>
        </slice>
        <from usec="0" sec="1591419608"/>
        <to usec="0" sec="1591420248"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="103.80.88.187"/>
        </slice>
        <from usec="0" sec="1591419608"/>
        <to usec="0" sec="1591420234"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="60.159.101.90"/>
        </slice>
        <from usec="0" sec="1591419609"/>
        <to usec="0" sec="1591420241"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="111.8.106.177"/>
        </slice>
        <from usec="0" sec="1591419609"/>
        <to usec="0" sec="1591420240"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="202.5.90.119" dst_ip="96.147.33.67" dst_port="8889"/>
            <filter src_ip="202.235.84.35" src_port="20104" dst_port="53"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420248"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.235.5.103" src_port="80"/>
        </slice>
        <from usec="0" sec="1591419612"/>
        <to usec="0" sec="1591420237"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="203.90.139.81"/>
        </slice>
        <from usec="0" sec="1591419630"/>
        <to usec="0" sec="1591420188"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.235.178.199"/>
        </slice>
        <from usec="0" sec="1591419636"/>
        <to usec="0" sec="1591420238"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="40.169.151.142"/>
        </slice>
        <from usec="0" sec="1591419641"/>
        <to usec="0" sec="1591420247"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="104.20.190.125"/>
        </slice>
        <from usec="0" sec="1591419714"/>
        <to usec="0" sec="1591420119"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.249.33.85"/>
        </slice>
        <from usec="0" sec="1591419736"/>
        <to usec="0" sec="1591420248"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.249.33.63"/>
        </slice>
        <from usec="0" sec="1591419736"/>
        <to usec="0" sec="1591420247"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.249.33.24"/>
        </slice>
        <from usec="0" sec="1591419737"/>
        <to usec="0" sec="1591420241"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.249.33.178"/>
        </slice>
        <from usec="0" sec="1591419747"/>
        <to usec="0" sec="1591420242"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="13.241.216.63"/>
        </slice>
        <from usec="0" sec="1591419845"/>
        <to usec="0" sec="1591420078"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="58.43.144.93"/>
        </slice>
        <from usec="0" sec="1591420008"/>
        <to usec="0" sec="1591420137"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="92.142.190.228" src_port="57819" dst_port="5351"/>
        </slice>
        <from usec="0" sec="1591420048"/>
        <to usec="0" sec="1591420149"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="196.204.36.133" src_port="55002" dst_port="5916"/>
        </slice>
        <from usec="0" sec="1591420123"/>
        <to usec="0" sec="1591420225"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="134.9.241.99" dst_port="13"/>
        </slice>
        <from usec="0" sec="1591420149"/>
        <to usec="0" sec="1591420248"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="126.142.0.39"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420338"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="203.90.148.35"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420326"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="223.185.119.62" dst_ip="133.253.103.226" src_port="53"/>
            <filter src_ip="203.90.148.35" dst_ip="133.253.103.226" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420337"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.90.137.87" src_port="443"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420327"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.235.115.196" src_port="22"/>
            <filter src_ip="133.235.115.196"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420322"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="175.240.88.185"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420321"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.90.139.78" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420330"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="68.143.61.236"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420338"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="36.28.231.3"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420330"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="80.162.187.137"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420337"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="114.83.244.10" dst_ip="133.253.65.79" src_port="60000"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420336"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="203.90.148.35" dst_ip="133.253.226.174" src_port="53"/>
            <filter src_ip="168.32.241.24" dst_ip="133.253.226.174" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420337"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="8.116.135.43" dst_ip="133.253.72.159" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419602"/>
        <to usec="0" sec="1591420336"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="47.17.115.150"/>
        </slice>
        <from usec="0" sec="1591419602"/>
        <to usec="0" sec="1591420337"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="203.90.148.35" dst_ip="133.253.108.81" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419603"/>
        <to usec="0" sec="1591420338"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="45.120.30.193"/>
        </slice>
        <from usec="0" sec="1591419603"/>
        <to usec="0" sec="1591420334"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="66.211.162.147"/>
        </slice>
        <from usec="0" sec="1591419604"/>
        <to usec="0" sec="1591420427"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.90.139.79" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419605"/>
        <to usec="0" sec="1591420330"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.228.72.34"/>
        </slice>
        <from usec="0" sec="1591419605"/>
        <to usec="0" sec="1591420336"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="163.220.136.228" dst_port="80"/>
        </slice>
        <from usec="0" sec="1591419605"/>
        <to usec="0" sec="1591420419"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="13.235.235.22" dst_port="443"/>
            <filter src_ip="163.220.90.90" dst_ip="52.228.3.12" dst_port="443"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420336"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="118.121.204.102"/>
        </slice>
        <from usec="0" sec="1591419609"/>
        <to usec="0" sec="1591420328"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="126.142.17.59"/>
        </slice>
        <from usec="0" sec="1591419611"/>
        <to usec="0" sec="1591420338"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="58.146.128.155"/>
        </slice>
        <from usec="0" sec="1591419613"/>
        <to usec="0" sec="1591420331"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="3.235.19.139"/>
        </slice>
        <from usec="0" sec="1591419615"/>
        <to usec="0" sec="1591420337"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="45.47.191.84"/>
        </slice>
        <from usec="0" sec="1591419817"/>
        <to usec="0" sec="1591420218"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="104.100.247.171"/>
        </slice>
        <from usec="0" sec="1591419936"/>
        <to usec="0" sec="1591420226"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="189.99.149.106"/>
        </slice>
        <from usec="0" sec="1591420018"/>
        <to usec="0" sec="1591420272"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="131.108.141.79"/>
        </slice>
        <from usec="0" sec="1591420129"/>
        <to usec="0" sec="1591420231"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="210.211.18.133"/>
        </slice>
        <from usec="0" sec="1591420173"/>
        <to usec="0" sec="1591420317"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="67.171.49.241"/>
        </slice>
        <from usec="0" sec="1591420182"/>
        <to usec="0" sec="1591420284"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,502,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="85.239.67.155"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420428"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="34.54.0.65"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420408"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="37.250.13.184"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420417"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="134.217.190.54"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420428"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="202.11.13.163"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420428"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="5.114.79.3"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420428"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="183.173.163.34"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420428"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.220.157.83"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420394"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="47.29.62.110"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420427"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.212.123.251" dst_ip="13.235.234.202" dst_port="53"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420428"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="104.215.13.206"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420426"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,502,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.11.24.46" dst_port="22"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420428"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="61.208.19.186"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420428"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="168.32.241.24" dst_ip="133.253.205.76" src_port="53"/>
            <filter src_ip="203.90.148.35" dst_ip="133.253.205.76" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420423"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="113.99.117.48"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420413"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="118.121.102.126"/>
        </slice>
        <from usec="0" sec="1591419601"/>
        <to usec="0" sec="1591420428"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.112.62.193"/>
        </slice>
        <from usec="0" sec="1591419602"/>
        <to usec="0" sec="1591420422"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="114.83.245.26" dst_ip="133.253.106.34" src_port="60000"/>
        </slice>
        <from usec="0" sec="1591419602"/>
        <to usec="0" sec="1591420428"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="185.22.105.237"/>
        </slice>
        <from usec="0" sec="1591419602"/>
        <to usec="0" sec="1591420426"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="106.50.197.90"/>
        </slice>
        <from usec="0" sec="1591419602"/>
        <to usec="0" sec="1591420428"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="126.50.240.89"/>
        </slice>
        <from usec="0" sec="1591419603"/>
        <to usec="0" sec="1591420425"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="126.41.5.243"/>
        </slice>
        <from usec="0" sec="1591419603"/>
        <to usec="0" sec="1591420426"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="126.190.94.208"/>
        </slice>
        <from usec="0" sec="1591419603"/>
        <to usec="0" sec="1591420419"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="221.175.173.107"/>
        </slice>
        <from usec="0" sec="1591419603"/>
        <to usec="0" sec="1591420426"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="61.208.190.247"/>
        </slice>
        <from usec="0" sec="1591419603"/>
        <to usec="0" sec="1591420405"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="46.28.47.32"/>
        </slice>
        <from usec="0" sec="1591419604"/>
        <to usec="0" sec="1591420426"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="163.220.10.37" src_port="443"/>
        </slice>
        <from usec="0" sec="1591419604"/>
        <to usec="0" sec="1591420428"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="203.90.148.35"/>
        </slice>
        <from usec="0" sec="1591419604"/>
        <to usec="0" sec="1591420423"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="203.90.148.35" dst_ip="133.253.115.156" src_port="53"/>
            <filter src_ip="223.185.119.62" dst_ip="133.253.115.156" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419604"/>
        <to usec="0" sec="1591420427"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.187.130.145"/>
        </slice>
        <from usec="0" sec="1591419604"/>
        <to usec="0" sec="1591420371"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="221.235.136.210" dst_port="23"/>
        </slice>
        <from usec="0" sec="1591419604"/>
        <to usec="0" sec="1591420425"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="1.81.95.171"/>
        </slice>
        <from usec="0" sec="1591419604"/>
        <to usec="0" sec="1591420421"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="203.90.148.35" dst_ip="133.253.221.80" src_port="53"/>
            <filter src_ip="168.32.241.24" dst_ip="133.253.221.80" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419604"/>
        <to usec="0" sec="1591420424"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="162.247.235.150"/>
        </slice>
        <from usec="0" sec="1591419605"/>
        <to usec="0" sec="1591420423"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="117.30.196.119"/>
        </slice>
        <from usec="0" sec="1591419606"/>
        <to usec="0" sec="1591420423"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="194.166.26.119"/>
        </slice>
        <from usec="0" sec="1591419607"/>
        <to usec="0" sec="1591420420"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.98.139.212"/>
        </slice>
        <from usec="0" sec="1591419607"/>
        <to usec="0" sec="1591420423"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="8.116.135.43" dst_ip="133.253.73.12" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419608"/>
        <to usec="0" sec="1591420426"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="203.90.148.35" dst_ip="133.253.201.72" src_port="53"/>
            <filter src_ip="168.32.241.24" dst_ip="133.253.201.72" src_port="53"/>
        </slice>
        <from usec="0" sec="1591419612"/>
        <to usec="0" sec="1591420427"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.220.158.241"/>
        </slice>
        <from usec="0" sec="1591419617"/>
        <to usec="0" sec="1591420425"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="77.123.144.131"/>
        </slice>
        <from usec="0" sec="1591419617"/>
        <to usec="0" sec="1591420426"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="119.207.121.244"/>
        </slice>
        <from usec="0" sec="1591419622"/>
        <to usec="0" sec="1591420370"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="183.76.222.103"/>
        </slice>
        <from usec="0" sec="1591419635"/>
        <to usec="0" sec="1591420354"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="101.0.137.26"/>
        </slice>
        <from usec="0" sec="1591419667"/>
        <to usec="0" sec="1591420427"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="120.159.3.29"/>
        </slice>
        <from usec="0" sec="1591419683"/>
        <to usec="0" sec="1591420392"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="58.41.43.178"/>
        </slice>
        <from usec="0" sec="1591419709"/>
        <to usec="0" sec="1591420428"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="71.249.33.234"/>
        </slice>
        <from usec="0" sec="1591419741"/>
        <to usec="0" sec="1591420420"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="3.224.129.76"/>
        </slice>
        <from usec="0" sec="1591419760"/>
        <to usec="0" sec="1591420421"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="60.67.111.106"/>
        </slice>
        <from usec="0" sec="1591419815"/>
        <to usec="0" sec="1591420310"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="141.25.113.170"/>
        </slice>
        <from usec="0" sec="1591420036"/>
        <to usec="0" sec="1591420413"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="91.29.75.23"/>
        </slice>
        <from usec="0" sec="1591420123"/>
        <to usec="0" sec="1591420425"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="91.93.91.222"/>
        </slice>
        <from usec="0" sec="1591420386"/>
        <to usec="0" sec="1591420392"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.142.5.46"/>
        </slice>
        <from usec="0" sec="1591420387"/>
        <to usec="0" sec="1591420392"/>
    </anomaly>
    <anomaly type="notice" value="0.329268,1.12232,011,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="194.166.26.55" dst_port="51634"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420428"/>
    </anomaly>
    <anomaly type="notice" value="0.785333,1.19063,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.90.129.186" dst_port="53"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591420222"/>
    </anomaly>
    <anomaly type="notice" value="0.785333,1.19063,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.90.142.62" dst_port="53"/>
        </slice>
        <from usec="0" sec="1591419600"/>
        <to usec="0" sec="1591419888"/>
    </anomaly>
    <anomaly type="notice" value="0.713398,1.12364,999,0 0 0 1 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="133.235.19.80" dst_ip="45.178.212.164" src_port="3389"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713398,1.12364,504,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="182.209.146.71" dst_port="23"/>
            <filter dst_ip="163.220.167.10" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713398,1.12364,501,0 0 0 1 0 0 0 0 0 1 0 0,heavy_hitter">
        <slice>
            <filter src_ip="163.221.193.24" dst_ip="64.91.67.10" src_port="21"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
