<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>
      Based on R.Fontugne et al. COST-TMA 2010
    </description>
        <url>
      http://www.fukuda-lab.org/~romain
    </url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
        <analyst>
      
    </analyst>
        <organization>
      
    </organization>
    </analysis>
    <dataset>
        <description>
      MAWI
    </description>
        <url>
      http://tracer.csl.sony.co.jp/mawi/
    </url>
    </dataset>
    <anomaly type="anomalous" value="3.9542,3.76147,999,1 1 1 1 1 1 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="81.49.176.59" dst_ip="202.6.232.206" dst_port="6500"/>
        </slice>
        <from usec="0" sec="1704085214"/>
        <to usec="0" sec="1704085385"/>
    </anomaly>
    <anomaly type="anomalous" value="3.34161,2.92559,999,1 1 1 1 1 0 0 0 0 1 1 1,ipv4gretun">
        <slice>
            <filter dst_ip="203.141.138.241"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="4.56355,4.02554,999,1 0 0 1 1 1 0 0 0 1 1 1,unknown">
        <slice>
            <filter src_ip="163.93.8.10" dst_ip="157.69.164.179"/>
            <filter src_ip="163.93.8.10" dst_ip="210.3.71.173"/>
            <filter src_ip="163.93.8.10" dst_ip="157.69.171.182"/>
            <filter src_ip="163.93.8.10" dst_ip="61.110.64.16"/>
            <filter src_ip="163.93.8.10" dst_ip="163.40.27.231"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="4.51556,4.02352,504,0 0 0 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="150.95.182.197" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="4.56355,4.02554,999,1 0 0 1 1 1 0 0 0 1 1 1,ipv4gretun">
        <slice>
            <filter src_ip="203.141.138.241" dst_ip="206.60.27.6"/>
            <filter src_ip="203.141.138.241" dst_ip="204.195.162.225"/>
            <filter src_ip="203.141.138.241" dst_ip="50.250.154.209"/>
            <filter src_ip="203.141.138.241" dst_ip="128.141.62.117"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="6.56944,5.46123,010,1 1 1 1 0 0 1 1 0 1 1 0,ntscSYN">
        <slice>
            <filter src_ip="94.105.18.236"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="4.51556,4.02352,999,0 0 0 1 1 1 0 0 0 1 1 1,ptmpla">
        <slice>
            <filter src_ip="203.141.147.147" dst_ip="160.86.30.244" src_port="8080"/>
            <filter src_ip="203.141.147.147" dst_ip="160.86.159.6" src_port="8080"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="11.0383,9.32673,999,1 1 1 1 1 0 1 1 1 1 1 0,mptp">
        <slice>
            <filter dst_ip="202.197.88.34" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.02892,2.78086,999,1 0 0 0 0 0 1 0 0 1 1 1,ptpposcaUDP">
        <slice>
            <filter src_ip="60.131.125.251" dst_ip="131.116.63.163"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.02892,2.78086,504,1 0 0 0 0 0 1 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="150.95.174.217" dst_ip="91.157.7.234" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="4.81074,4.11296,999,1 1 1 1 1 1 1 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="162.11.178.172" dst_port="194"/>
            <filter src_ip="91.188.254.33" src_port="5060" dst_port="5060"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="11.1393,9.40514,999,0 0 0 0 0 0 1 1 1 1 1 1,ptpposcaUDP">
        <slice>
            <filter src_ip="157.174.232.89" dst_ip="123.174.207.97"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.78067,2.7175,504,0 0 0 0 0 0 0 0 0 1 1 1,mptpla">
        <slice>
            <filter src_ip="182.224.180.32" dst_ip="133.232.160.86" src_port="443"/>
            <filter src_ip="103.231.70.142" dst_ip="133.232.160.86" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.06025,2.79129,010,1 1 1 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="118.161.147.36" dst_port="7890"/>
            <filter src_ip="189.11.50.9" dst_port="123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.78067,2.7175,999,0 0 0 0 0 0 0 0 0 1 1 1,mptpla">
        <slice>
            <filter src_ip="60.138.209.43" dst_ip="133.251.8.12"/>
            <filter src_ip="60.98.138.218" dst_ip="133.251.8.12"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.78067,2.7175,504,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="91.157.7.234" dst_ip="150.95.174.217" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.95612,2.77794,503,0 0 0 0 0 0 1 0 0 1 1 1,mptplaHTTP">
        <slice>
            <filter src_ip="118.111.35.141" dst_ip="157.174.226.178" src_port="80"/>
            <filter src_ip="61.177.196.84" dst_ip="157.174.226.178" src_port="80"/>
            <filter src_ip="61.177.196.84" dst_ip="157.174.226.178" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="4.67253,4.06658,010,1 0 0 1 1 1 1 0 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="118.123.105.38" dst_port="994"/>
            <filter src_ip="141.101.192.60" dst_port="5555"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="4.81074,4.11296,504,1 1 1 1 1 1 1 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="150.95.0.162" dst_port="80"/>
            <filter dst_ip="150.95.0.162" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.78067,2.7175,999,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="157.174.151.216" dst_ip="27.56.33.162" dst_port="8080"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="4.56355,4.02554,504,1 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="150.95.0.162" src_port="80"/>
            <filter src_ip="150.95.0.162" src_port="443"/>
            <filter src_ip="203.141.138.107" src_port="80"/>
            <filter src_ip="203.141.132.33" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.29579,2.91751,999,1 0 0 1 1 0 1 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="8.58.11.241" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.93688,2.77989,999,0 0 0 1 0 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="202.12.56.242" src_port="443"/>
            <filter dst_ip="163.93.248.25" src_port="443"/>
            <filter dst_ip="202.12.56.242"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.0692,2.85717,504,0 0 0 1 1 0 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="142.133.188.22" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.78067,2.7175,504,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="45.232.98.97" dst_ip="150.95.173.242" src_port="443" dst_port="65525"/>
            <filter src_ip="45.232.98.97" dst_ip="150.95.173.242" src_port="443" dst_port="62104"/>
            <filter src_ip="45.232.98.97" dst_ip="150.95.173.242" src_port="443" dst_port="59187"/>
            <filter src_ip="45.232.98.97" dst_ip="150.95.173.242" src_port="443" dst_port="51418"/>
            <filter src_ip="45.232.98.97" dst_ip="150.95.173.242" src_port="443" dst_port="50197"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.76021,2.7195,504,0 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="157.14.224.146" src_port="443"/>
            <filter dst_ip="150.95.46.81" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.78067,2.7175,504,0 0 0 0 0 0 0 0 0 1 1 1,mptpla">
        <slice>
            <filter dst_ip="150.95.204.192" src_port="443"/>
            <filter src_ip="47.19.100.226" dst_ip="150.95.204.192" src_port="25466"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="6.98792,5.69807,010,1 1 1 1 0 0 1 1 0 1 1 1,ntscSYN">
        <slice>
            <filter src_ip="109.45.162.34" src_port="45140"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.38854,2.94515,504,1 1 0 1 1 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.78067,2.7175,999,0 0 0 0 0 0 0 0 0 1 1 1,mptpla">
        <slice>
            <filter src_ip="150.95.58.175" dst_ip="163.221.247.218" dst_port="5555"/>
            <filter src_ip="150.95.110.48" dst_ip="163.221.247.218" dst_port="5555"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.95062,2.26658,010,1 1 1 0 0 0 0 0 0 1 1 0,ntscSYN">
        <slice>
            <filter src_ip="218.67.251.227" src_port="9090" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.52678,2.23165,010,1 1 1 0 0 0 0 0 0 1 0 0,ntscSYN">
        <slice>
            <filter src_ip="171.63.247.118" dst_port="6379"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.72555,2.31188,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="103.84.178.80" dst_port="6379"/>
        </slice>
        <from usec="0" sec="1704085381"/>
        <to usec="0" sec="1704085561"/>
    </anomaly>
    <anomaly type="suspicious" value="1.52678,2.23165,999,1 1 1 0 0 0 0 0 0 1 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="189.127.227.210" dst_port="123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.52678,2.23165,999,1 1 1 0 0 0 0 0 0 1 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="189.11.50.54" dst_port="123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.52678,2.23165,999,1 1 1 0 0 0 0 0 0 1 0 0,ntscUDPOther">
        <slice>
            <filter src_ip="168.11.65.4" dst_port="123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.72284,2.36093,999,1 1 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="131.117.144.55" dst_ip="144.188.208.236"/>
            <filter src_ip="131.117.144.55" dst_port="443"/>
            <filter dst_ip="144.188.208.236" dst_port="8801"/>
            <filter src_ip="131.117.144.55" dst_ip="144.188.243.53" dst_port="8801"/>
        </slice>
        <from usec="0" sec="1704085200"/>
        <to usec="0" sec="1704085960"/>
    </anomaly>
    <anomaly type="suspicious" value="3.58926,3.66346,020,0 0 0 1 1 1 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="203.141.166.69"/>
        </slice>
        <from usec="0" sec="1704085206"/>
        <to usec="0" sec="1704085754"/>
    </anomaly>
    <anomaly type="suspicious" value="3.58926,3.66346,020,0 0 0 1 1 1 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="108.167.27.23"/>
        </slice>
        <from usec="0" sec="1704085208"/>
        <to usec="0" sec="1704085809"/>
    </anomaly>
    <anomaly type="suspicious" value="3.58926,3.66346,010,0 0 0 1 1 1 0 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="205.45.32.48" src_port="56389" dst_port="9444"/>
            <filter src_ip="205.45.32.48" src_port="52139" dst_port="51401"/>
        </slice>
        <from usec="0" sec="1704085663"/>
        <to usec="0" sec="1704085848"/>
    </anomaly>
    <anomaly type="suspicious" value="3.58926,3.66346,999,0 0 0 1 1 1 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="146.193.95.103" src_port="51519"/>
        </slice>
        <from usec="0" sec="1704085200"/>
        <to usec="0" sec="1704086028"/>
    </anomaly>
    <anomaly type="suspicious" value="3.34588,3.5556,901,0 0 0 0 0 1 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1704085200"/>
        <to usec="0" sec="1704086028"/>
    </anomaly>
    <anomaly type="suspicious" value="1.70852,2.39328,999,0 0 0 1 1 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.141.141.223" dst_port="53"/>
        </slice>
        <from usec="0" sec="1704085226"/>
        <to usec="0" sec="1704085938"/>
    </anomaly>
    <anomaly type="suspicious" value="1.70852,2.39328,999,0 0 0 1 1 0 1 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="206.93.124.117" dst_ip="150.95.36.32" src_port="53"/>
            <filter src_ip="206.93.124.117" dst_ip="203.141.136.187" src_port="53"/>
        </slice>
        <from usec="0" sec="1704085200"/>
        <to usec="0" sec="1704085938"/>
    </anomaly>
    <anomaly type="suspicious" value="1.8316,2.39668,999,1 0 0 1 1 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="203.141.131.154" dst_port="53"/>
            <filter dst_ip="202.6.226.1" dst_port="53"/>
            <filter dst_ip="203.141.138.18" dst_port="53"/>
        </slice>
        <from usec="0" sec="1704085210"/>
        <to usec="0" sec="1704086047"/>
    </anomaly>
    <anomaly type="suspicious" value="1.70852,2.39328,901,0 0 0 1 1 0 1 0 0 0 0 0,empty">
        <slice/>
        <from usec="0" sec="1704085200"/>
        <to usec="0" sec="1704086006"/>
    </anomaly>
    <anomaly type="suspicious" value="2.18013,2.41921,901,0 0 0 1 1 0 1 0 0 1 1 0,empty">
        <slice/>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.41011,2.45579,999,1 1 0 1 1 0 1 0 0 1 1 0,mptmp">
        <slice>
            <filter dst_ip="202.221.213.161" dst_port="53"/>
            <filter dst_ip="202.221.209.67" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.57933,2.1813,504,1 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="163.93.192.250" dst_ip="163.50.121.116" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.8405,2.25855,901,1 0 0 1 0 0 1 0 0 1 1 0,empty">
        <slice/>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.92134,2.26898,010,1 1 1 1 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="51.238.131.47" src_port="25565"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.71806,2.25495,999,0 0 0 1 0 0 1 0 0 1 1 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="150.95.6.137" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.75073,2.25254,503,0 0 0 0 0 0 1 0 0 1 1 0,mptplaHTTP">
        <slice>
            <filter src_ip="202.254.237.66" dst_ip="157.174.227.174" src_port="80"/>
            <filter src_ip="118.111.35.141" dst_ip="157.174.227.174" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="2.18013,2.41921,999,0 0 0 1 1 0 1 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="203.141.139.166" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.75073,2.25254,999,0 0 0 0 0 0 1 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="95.155.168.162" src_port="53"/>
            <filter src_ip="198.21.7.251" src_port="53"/>
            <filter dst_ip="157.174.35.218" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.71806,2.25495,999,0 0 0 1 0 0 1 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="192.206.232.137" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.93557,2.34956,504,0 0 0 1 1 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter dst_ip="163.93.130.91"/>
            <filter dst_ip="150.95.109.119" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
