<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="anomalous" value="3.88254,3.69235,504,1 1 1 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="150.33.124.114" dst_port="80"/>
            <filter dst_ip="150.33.124.114" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="15.373,12.3249,999,1 1 1 1 1 1 1 1 1 1 1 1,mptmp">
        <slice>
            <filter src_ip="193.144.106.49" dst_port="80"/>
            <filter src_ip="64.252.10.244" src_port="5114" dst_port="5060"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.82641,3.77432,010,1 1 1 1 0 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="94.230.205.26"/>
            <filter src_ip="119.54.74.170" src_port="32588" dst_port="22"/>
            <filter src_ip="220.114.148.154" src_port="42017" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.88254,3.69235,504,1 1 1 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="80.108.50.233"/>
            <filter src_port="443"/>
            <filter src_ip="37.229.44.220" dst_port="5555"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.82641,3.77432,010,1 1 1 1 0 0 1 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="128.39.13.103" dst_port="80"/>
            <filter src_ip="128.39.13.103" dst_port="8080"/>
            <filter src_ip="128.39.13.103" dst_port="442"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.56123,3.3037,503,1 1 0 1 1 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="203.188.119.213" dst_port="53"/>
            <filter dst_ip="203.188.118.93" dst_port="80"/>
            <filter dst_ip="203.188.123.183" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="3.63891,3.77385,010,1 1 1 1 1 0 1 0 0 1 0 0,mptmp">
        <slice>
            <filter dst_ip="202.122.234.40" dst_port="80"/>
            <filter dst_ip="202.122.234.144" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.244,3.34001,010,1 1 1 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="91.65.238.67" src_port="52776"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.74831,3.34545,999,1 1 1 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="162.23.109.75"/>
            <filter src_ip="198.47.104.249"/>
            <filter src_ip="139.27.199.252" dst_port="6379"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.60549,3.33057,999,1 1 1 1 1 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="64.79.91.224" src_port="3389"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="3.22882,3.68846,999,1 1 0 1 0 0 1 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="203.188.114.168" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="3.22209,3.64229,504,0 0 0 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="163.250.227.108" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.76351,3.63943,502,0 0 0 1 1 1 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.188.98.39" dst_ip="87.213.167.48" src_port="22"/>
            <filter src_ip="203.188.98.39" dst_ip="179.63.239.11" src_port="22"/>
            <filter src_ip="203.188.98.39" dst_ip="37.114.91.229" src_port="22"/>
        </slice>
        <from usec="0" sec="1683262800"/>
        <to usec="0" sec="1683263268"/>
    </anomaly>
    <anomaly type="suspicious" value="2.76351,3.63943,999,0 0 0 1 1 1 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="150.33.16.213" dst_port="6881"/>
        </slice>
        <from usec="0" sec="1683262800"/>
        <to usec="0" sec="1683263352"/>
    </anomaly>
    <anomaly type="suspicious" value="2.21908,3.32516,999,1 1 1 1 0 0 0 0 0 1 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="172.237.194.191" src_port="5145" dst_port="5070"/>
            <filter src_ip="172.237.194.191" src_port="5126" dst_port="5070"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.55325,3.6349,901,0 0 0 0 0 1 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1683262800"/>
        <to usec="0" sec="1683262998"/>
    </anomaly>
    <anomaly type="suspicious" value="2.70473,3.73582,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="148.121.6.140"/>
        </slice>
        <from usec="0" sec="1683263070"/>
        <to usec="0" sec="1683263116"/>
    </anomaly>
    <anomaly type="suspicious" value="2.70473,3.73582,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="192.13.228.191" dst_port="8443"/>
        </slice>
        <from usec="0" sec="1683263385"/>
        <to usec="0" sec="1683263431"/>
    </anomaly>
    <anomaly type="suspicious" value="2.70473,3.73582,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="146.95.55.123"/>
        </slice>
        <from usec="0" sec="1683263475"/>
        <to usec="0" sec="1683263521"/>
    </anomaly>
    <anomaly type="suspicious" value="2.70473,3.73582,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="118.13.41.54" dst_port="9000"/>
        </slice>
        <from usec="0" sec="1683263475"/>
        <to usec="0" sec="1683263521"/>
    </anomaly>
    <anomaly type="suspicious" value="2.70473,3.73582,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="3.178.75.54"/>
        </slice>
        <from usec="0" sec="1683263475"/>
        <to usec="0" sec="1683263521"/>
    </anomaly>
    <anomaly type="suspicious" value="2.68409,3.72256,010,0 0 0 1 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="192.13.243.33" dst_port="7443"/>
        </slice>
        <from usec="0" sec="1683262809"/>
        <to usec="0" sec="1683263566"/>
    </anomaly>
    <anomaly type="suspicious" value="2.72608,3.72047,010,0 0 0 0 0 0 1 0 0 1 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="125.233.103.243" dst_ip="150.33.88.126" dst_port="3128"/>
            <filter src_ip="125.233.103.243" dst_ip="150.33.88.125" dst_port="3128"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.76847,3.36021,503,1 1 1 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="163.250.122.37" dst_port="80"/>
            <filter src_ip="163.250.122.107" dst_ip="185.130.67.99" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.56123,3.3037,010,1 1 0 1 1 0 0 0 0 1 1 1,sntscSYN">
        <slice>
            <filter src_ip="109.45.64.76" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="3.22209,3.64229,503,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.250.122.107"/>
            <filter dst_ip="150.33.17.21" src_port="443"/>
            <filter dst_ip="150.33.17.21" dst_port="46441"/>
            <filter dst_ip="163.250.232.150" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="3.22209,3.64229,503,0 0 0 1 1 1 0 0 0 1 1 1,mptplaHTTP">
        <slice>
            <filter src_ip="8.63.61.254" dst_ip="150.33.199.237" src_port="80"/>
            <filter src_ip="8.63.52.2" dst_ip="150.33.199.237" src_port="80"/>
            <filter src_ip="8.61.191.14" dst_ip="150.33.199.237" src_port="80"/>
            <filter src_ip="67.240.164.1" dst_ip="150.33.199.237" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="3.58493,3.63648,999,1 1 0 1 1 1 0 0 0 1 1 1,ipv4gretun">
        <slice>
            <filter src_ip="203.188.118.232" dst_ip="206.36.251.254"/>
            <filter src_ip="203.188.118.232" dst_ip="204.205.233.238"/>
            <filter src_ip="203.188.118.232" dst_ip="50.207.10.62"/>
            <filter src_ip="203.188.118.232" dst_ip="128.14.254.109"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.95115,3.60873,504,1 0 0 1 1 1 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="163.250.126.18" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.60549,3.33057,901,1 1 1 1 1 0 0 0 0 1 1 0,empty">
        <slice/>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="3.36722,3.62743,504,1 0 0 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="150.33.16.143" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="3.22209,3.64229,504,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_port="443"/>
            <filter dst_ip="163.250.111.191"/>
            <filter dst_ip="163.250.111.191"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.84019,3.70757,010,0 0 0 0 0 0 1 0 0 1 1 0,ptpDoSSYN">
        <slice>
            <filter src_ip="198.128.8.71" dst_ip="202.122.235.229" dst_port="30120"/>
            <filter src_ip="198.128.8.71" dst_ip="203.188.121.226" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="3.22209,3.64229,504,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.250.224.158" src_port="443"/>
            <filter dst_ip="163.250.127.249" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="3.22209,3.64229,504,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="163.250.227.67" src_port="443"/>
            <filter dst_ip="150.33.16.229" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="3.36722,3.62743,503,1 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="203.188.118.93" src_port="80"/>
            <filter src_ip="203.188.123.183" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.9635,3.3651,504,1 1 1 1 1 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_port="443"/>
            <filter src_ip="176.186.55.246" src_port="60000" dst_port="22160"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.9635,3.3651,010,1 1 1 1 1 0 0 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="80.124.49.227"/>
            <filter src_ip="89.51.68.39" src_port="41761" dst_port="2375"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="3.22209,3.64229,999,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="150.33.18.198"/>
            <filter dst_ip="163.250.12.196" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="3.3434,3.74301,010,0 0 0 1 1 0 1 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="118.13.41.53" dst_port="9000"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.98526,3.67955,901,1 0 0 1 0 0 1 0 0 1 1 0,empty">
        <slice/>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
