<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="anomalous" value="7.15913,6.1981,010,1 1 0 1 1 0 1 1 1 1 1 0,heavy_hitter">
        <slice>
            <filter src_ip="217.115.46.85" dst_ip="203.66.191.85" src_port="47972"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.76705,1.5674,504,1 1 1 1 0 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="202.248.97.217" dst_port="443"/>
            <filter src_ip="202.248.97.217" dst_ip="117.235.106.44" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.25617,2.59418,999,1 1 1 0 0 0 1 1 0 1 1 1,ntscUDPOther">
        <slice>
            <filter src_ip="72.204.26.68" src_port="5561" dst_port="5060"/>
            <filter src_ip="72.204.26.68" src_port="5497" dst_port="5060"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.97853,1.65535,010,1 1 1 0 0 0 1 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="80.60.76.140" dst_port="8834"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.76705,1.5674,504,1 1 1 1 0 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="163.42.81.103" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.93111,2.2984,999,1 1 1 1 1 1 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="133.98.220.176" dst_port="19204"/>
            <filter src_ip="133.98.220.176" src_port="389" dst_port="80"/>
            <filter src_ip="133.98.220.176" src_port="11832" dst_port="13360"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.22069,1.71794,504,1 1 1 1 1 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="202.248.97.196" dst_port="443"/>
            <filter src_ip="202.248.97.49" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.97755,1.63532,011,1 1 1 1 0 0 1 0 0 1 1 1,ptmpla">
        <slice>
            <filter src_ip="203.66.191.85" dst_ip="91.239.242.100"/>
            <filter src_ip="203.66.191.85" dst_ip="217.115.46.85" dst_port="47972"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.66293,1.61463,502,1 1 0 1 1 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="91.241.68.126" dst_ip="133.123.125.210"/>
            <filter src_ip="61.177.146.251" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.6101,2.20712,504,0 0 0 1 1 1 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="17.7.157.173" dst_ip="163.42.254.92" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.79346,1.695,999,0 0 0 1 1 0 1 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="163.42.161.163" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.74286,2.24093,010,1 1 1 1 1 1 0 0 0 1 1 0,ntscSYN">
        <slice>
            <filter src_ip="218.97.199.105" src_port="9090" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.76995,2.56276,010,0 0 0 0 0 0 1 1 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="104.131.188.173" src_port="48330" dst_port="20020"/>
        </slice>
        <from usec="0" sec="1614748455"/>
        <to usec="0" sec="1614748501"/>
    </anomaly>
    <anomaly type="anomalous" value="2.62381,2.51996,999,0 0 0 0 0 0 0 1 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.0.226.192" src_port="5103" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1614748455"/>
        <to usec="0" sec="1614748501"/>
    </anomaly>
    <anomaly type="anomalous" value="1.55301,1.51867,999,0 0 0 1 0 0 0 0 0 1 1 1,ipv4gretun">
        <slice>
            <filter src_ip="203.66.182.3" dst_ip="206.224.29.126"/>
            <filter src_ip="203.66.182.3" dst_ip="204.77.222.47"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.80727,2.26545,504,0 0 0 1 1 1 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="192.229.232.247" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.94432,2.31296,504,0 0 0 1 1 1 1 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.42.165.56"/>
            <filter dst_ip="163.42.254.253" src_port="443"/>
            <filter dst_ip="163.42.81.76" src_port="443"/>
            <filter dst_ip="203.66.185.194" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.68599,1.55352,999,1 1 1 1 0 0 1 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="133.98.181.164" dst_ip="51.36.222.94"/>
            <filter src_ip="133.98.181.164" dst_ip="24.174.203.115"/>
            <filter src_ip="133.98.181.164" src_port="1194"/>
            <filter src_ip="203.66.191.31" dst_ip="51.36.222.94"/>
            <filter src_ip="203.66.191.31" dst_ip="24.174.203.115"/>
            <filter src_ip="203.66.191.31" src_port="1194"/>
            <filter src_ip="203.66.188.101" dst_ip="51.36.222.94"/>
            <filter src_ip="203.66.188.101" dst_ip="24.174.203.115"/>
            <filter src_ip="203.66.188.101" src_port="1194"/>
            <filter dst_ip="51.36.222.94" src_port="1194"/>
            <filter dst_ip="24.174.203.115" src_port="1194"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.57818,1.49681,504,1 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="117.236.233.150" src_port="443"/>
            <filter dst_ip="163.42.252.90" src_port="443"/>
            <filter dst_ip="163.42.126.91" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.80727,2.26545,504,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.42.70.158" src_port="443"/>
            <filter dst_ip="163.42.127.136" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.57818,1.49681,504,1 0 0 1 0 0 0 0 0 1 1 1,salphfl">
        <slice>
            <filter src_ip="163.42.252.121" dst_ip="3.129.52.249" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.81077,1.56779,504,1 0 0 1 0 0 1 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="13.84.234.12" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.55301,1.51867,020,0 0 0 1 0 0 0 0 0 1 1 1,ntscICecrqICecrprp">
        <slice>
            <filter dst_ip="54.132.204.59"/>
            <filter dst_ip="34.230.82.116"/>
            <filter dst_ip="3.130.184.130"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.81077,1.56779,504,1 0 0 1 0 0 1 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="18.188.152.17" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.55301,1.51867,504,0 0 0 1 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.42.67.101" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.55426,1.54022,504,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="202.248.101.133" dst_ip="126.113.123.109" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.57818,1.49681,503,1 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="203.66.188.108" src_port="80"/>
            <filter src_ip="203.66.182.167" dst_ip="211.50.220.196" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.55426,1.54022,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.42.252.121" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.86668,2.25472,504,1 1 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_port="443"/>
            <filter src_ip="17.2.171.252" src_port="80"/>
            <filter dst_ip="163.42.245.31" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.80727,2.26545,503,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="192.229.232.208" src_port="80"/>
            <filter dst_ip="163.42.81.103" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.55426,1.54022,504,0 0 0 0 0 0 0 0 0 1 1 1,mptpla">
        <slice>
            <filter dst_ip="163.42.20.42" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.81077,1.56779,504,1 0 0 1 0 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="202.241.114.59" src_port="53"/>
            <filter dst_ip="163.42.126.9" src_port="443"/>
            <filter dst_ip="163.42.254.103" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.5713,1.48814,054,1 1 0 1 0 0 1 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="192.241.202.179" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.55426,1.54022,504,0 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="192.229.238.225" src_port="443"/>
            <filter dst_ip="163.42.252.123" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.78996,1.60929,504,0 0 0 0 0 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.42.126.31" src_port="443"/>
            <filter dst_ip="163.42.126.31" src_port="80"/>
            <filter dst_ip="163.42.255.52" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.55301,1.51867,504,0 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.42.253.59" src_port="443"/>
            <filter dst_ip="163.42.253.59" src_port="80"/>
            <filter dst_ip="163.42.255.72" src_port="80"/>
            <filter dst_ip="163.42.126.69" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.55301,1.51867,010,0 0 0 1 0 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="159.94.163.127" src_port="43397"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.14454,2.55214,010,0 0 0 1 0 0 1 1 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="192.241.205.82" dst_port="443"/>
            <filter src_ip="104.131.188.173" src_port="48330" dst_port="20020"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.80727,2.26545,504,0 0 0 1 1 1 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="31.18.218.12" dst_ip="163.42.118.21" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.52247,2.67552,999,1 1 1 1 1 0 1 1 0 1 1 1,ntscUDPOther">
        <slice>
            <filter src_ip="216.11.209.14" src_port="5088" dst_port="5060"/>
            <filter src_ip="193.211.3.229" src_port="46420" dst_port="5060"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.55426,1.54022,503,0 0 0 0 0 0 0 0 0 1 1 1,mptplaHTTP">
        <slice>
            <filter dst_ip="163.42.29.30" src_port="80"/>
            <filter src_ip="23.88.234.123" dst_ip="163.42.29.30" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.95767,2.29866,504,1 0 0 1 1 1 1 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="51.14.167.222" dst_port="500"/>
            <filter dst_ip="163.42.17.22" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.95767,2.29866,504,1 0 0 1 1 1 1 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="202.241.81.13" src_port="53"/>
            <filter dst_ip="202.241.81.13" src_port="443"/>
            <filter dst_ip="203.66.178.134" src_port="53"/>
            <filter dst_ip="203.66.178.134" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.55426,1.54022,504,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.42.182.183" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.97755,1.63532,010,1 1 1 1 0 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="125.192.33.11" dst_port="8194"/>
            <filter src_ip="193.211.3.218" src_port="5076" dst_port="5060"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.97755,1.63532,503,1 1 1 1 0 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="203.66.182.167" dst_port="80"/>
            <filter dst_ip="203.66.188.108" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.15323,1.5203,999,1 1 1 1 0 0 0 0 0 1 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="192.98.209.24" src_port="49443" dst_port="5060"/>
            <filter src_ip="149.44.122.189" src_port="5310" dst_port="5060"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.30198,1.65184,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="185.0.226.192" src_port="5108" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1614748410"/>
        <to usec="0" sec="1614748456"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41471,1.67012,999,0 0 0 1 1 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="77.201.18.77" dst_ip="202.25.61.80" src_port="45537"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614747796"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41471,1.67012,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="77.201.18.77" dst_ip="202.25.60.81" src_port="45537"/>
            <filter src_ip="139.178.22.24" dst_ip="202.25.60.81" dst_port="992"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614747978"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41471,1.67012,999,0 0 0 1 1 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="77.201.18.77" dst_ip="202.25.60.102" src_port="45537"/>
        </slice>
        <from usec="0" sec="1614747601"/>
        <to usec="0" sec="1614748068"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41471,1.67012,504,0 0 0 1 1 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="163.42.14.235" dst_ip="52.176.221.234" dst_port="443"/>
        </slice>
        <from usec="0" sec="1614747613"/>
        <to usec="0" sec="1614748007"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41471,1.67012,999,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.42.13.62" dst_ip="60.121.60.218" src_port="49871" dst_port="61348"/>
        </slice>
        <from usec="0" sec="1614747600"/>
        <to usec="0" sec="1614748338"/>
    </anomaly>
    <anomaly type="suspicious" value="1.41471,1.67012,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.66.178.198" dst_ip="94.16.213.156" src_port="55586"/>
        </slice>
        <from usec="0" sec="1614747624"/>
        <to usec="0" sec="1614748417"/>
    </anomaly>
    <anomaly type="suspicious" value="1.16085,1.45308,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="151.165.109.32" dst_ip="163.42.127.136" src_port="443" dst_port="50708"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.16085,1.45308,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="163.42.252.89" dst_port="443"/>
            <filter src_ip="163.42.252.89" dst_ip="13.84.221.203" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.16085,1.45308,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="163.42.255.43" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.16085,1.45308,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="202.202.60.230" dst_ip="163.42.216.235" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.16085,1.45308,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="203.66.178.205" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.16085,1.45308,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="23.192.44.79" dst_ip="203.66.185.195" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.16085,1.45308,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="52.219.41.41" dst_ip="163.42.25.110" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.16085,1.45308,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="65.113.33.230" dst_ip="163.42.253.207" src_port="443" dst_port="49812"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.16085,1.45308,504,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="89.181.165.106" dst_ip="163.42.254.24" src_port="443" dst_port="44843"/>
            <filter src_ip="89.181.165.106" dst_ip="163.42.254.24" src_port="443" dst_port="44629"/>
            <filter src_ip="89.181.165.106" dst_ip="163.42.182.172" src_port="443" dst_port="43416"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.16085,1.45308,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="203.66.184.15" dst_ip="13.35.18.112" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.16085,1.45308,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="150.194.53.201" dst_ip="163.42.254.219" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
