[User] Processor(_Total) DPC Rate: 1, Processor(_Total) pct_ Idle Time: 92.44791667, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 7.03125, Processor(_Total) pct_ C1 Time: 90, Processor(_Total) pct_ Processor Time: 7.552083333, Processor(_Total) C1 Transitions sec: 301.5950418, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 0.520833333, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 18.06636966, Processor(_Total) Interrupts sec: 241.9960216, Process(_Total) Pool Paged Bytes: 10218328, Process(_Total) IO Read Operations sec: 12.79978957, Process(_Total) Working Set - Private: 1566490624, Process(_Total) Working Set Peak: 2615709696, Process(_Total) IO Write Operations sec: 8.399861906, Process(_Total) Page File Bytes: 2097545216, Process(_Total) pct_ User Time: 14.0625, Process(_Total) Virtual Bytes Peak: 9356996608, Process(_Total) Page File Bytes Peak: 2381758464, Process(_Total) IO Other Bytes sec: 12431.79562, Process(_Total) Private Bytes: 2097545216, Process(_Total) IO Write Bytes sec: 16520.26174, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 8162660352, Process(_Total) pct_ Processor Time: 200, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1360112, Process(_Total) Working Set: 1896976384, Process(_Total) Page Faults sec: 873.9189661, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 644.5227374, Process(_Total) IO Data Operations sec: 21.19965148, Process(_Total) Thread Count: 647, Process(_Total) pct_ Privileged Time: 185.9375, Process(_Total) IO Data Bytes sec: 30164.83742, Process(_Total) IO Read Bytes sec: 13644.57568, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 16624, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 3009.683854, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 450.7259234, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 3460.409778, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 7.199881634, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 9.999835603, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 17.19971724, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 7.199881634, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 9.999835603, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 109809664, Memory Free & Zero Page List Bytes: 221032448, Memory Cache Bytes Peak: 139370496, Memory System Code Resident Bytes: 49152, Memory Available Bytes: 945717248, Memory Commit Limit: 6070345728, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 3.133281822, Memory Demand Zero Faults sec: 765.9207416, Memory Available KBytes: 923552, Memory Pages sec: 3.133281822, Memory Cache Bytes: 28651520, Memory Pool Nonpaged Bytes: 71090176, Memory Page Faults sec: 1016.516622, Memory Transition Faults sec: 243.4626641, Memory System Cache Resident Bytes: 28651520, Memory Standby Cache Reserve Bytes: 378126336, Memory Page Writes sec: 0, Memory System Code Total Bytes: 4370432, Memory Standby Cache Core Bytes: 98836480, Memory System Driver Resident Bytes: 3747840, Memory Standby Cache Normal Priority Bytes: 247721984, Memory Pool Paged Allocs: 86336, Memory Pool Nonpaged Allocs: 78735, Memory pct_ Committed Bytes In Use: 43.58118457, Memory Free System Page Table Entries: 33556544, Memory Available MBytes: 901, Memory Modified Page List Bytes: 3231744, Memory Cache Faults sec: 7.466543917, Memory Committed Bytes: 2645528576, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 3.133281822, Memory Pool Paged Resident Bytes: 53096448, Memory Write Copies sec: 11.5998093

[Assistant] attack


[User] src_ip: 192.168.1.190, src_port: 1283, dst_ip: 192.168.1.190, dst_port: 1283, proto: tcp, service: -, duration: 0.253824, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 53782, dst_ip: 101.119.11.11, dst_port: 80, proto: tcp, service: http, duration: 456.360915, src_bytes: 2880, dst_bytes: 3840, conn_state: SF, missed_bytes: 0, src_pkts: 66, src_ip_bytes: 6344, dst_pkts: 56, dst_ip_bytes: 7528, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.33, src_port: 46263, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 184, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2842, MINFLT: 0, MAJFLT: 0, VSTEXT: 350, VSIZE: 315.2, RSIZE: 2104, VGROW: 0, RGROW: 0, MEM: 0, CMD: mission-contro

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 46166, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.010492, src_bytes: 167, dst_bytes: 2813, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 435, dst_pkts: 6, dst_ip_bytes: 3133, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.37, src_port: 36673, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 60, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  13:56:17 , temperature: 21.99959193, pressure: 9.269251073, humidity: 51.65215416

[Assistant] attack


[User] PID: 2844, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: atop, attack: 1

[Assistant] attack


[User] PID: 1878, TRUN: 0, TSLPI: 2, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: vmtoolsd

[Assistant] attack


[User] date: 31-Mar-19, time: 12:38:50, latitude: 0.658784631, longitude: 10.55970216

[Assistant] normal


[User] date: 27-Apr-19, time:  05:09:09 , current_temperature: 31.39246655, thermostat_status: 1

[Assistant] attack


[User] src_ip: 192.168.1.33, src_port: 37275, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: RSTRH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2327, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vmtoolsd, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 32966, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1192, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: NetworkManager

[Assistant] attack


[User] Processor(_Total) DPC Rate: 0, Processor(_Total) pct_ Idle Time: 98.85416667, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 0.9375, Processor(_Total) pct_ C1 Time: 100, Processor(_Total) pct_ Processor Time: 1.145833333, Processor(_Total) C1 Transitions sec: 94.51548944, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 0.208333333, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 89.98301181, Processor(_Total) Interrupts sec: 112.1121673, Process(_Total) Pool Paged Bytes: 7008768, Process(_Total) IO Read Operations sec: 7.731873607, Process(_Total) Working Set - Private: 303865856, Process(_Total) Working Set Peak: 1164902400, Process(_Total) IO Write Operations sec: 6.198829702, Process(_Total) Page File Bytes: 662888448, Process(_Total) pct_ User Time: 0.9375, Process(_Total) Virtual Bytes Peak: 5637337088, Process(_Total) Page File Bytes Peak: 912662528, Process(_Total) IO Other Bytes sec: 2040.014859, Process(_Total) Private Bytes: 662888448, Process(_Total) IO Write Bytes sec: 12046.25908, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 4865658880, Process(_Total) pct_ Processor Time: 100, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1012808, Process(_Total) Working Set: 612270080, Process(_Total) Page Faults sec: 692.935845, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 89.78304956, Process(_Total) IO Data Operations sec: 13.93070331, Process(_Total) Thread Count: 573, Process(_Total) pct_ Privileged Time: 99.0625, Process(_Total) IO Data Bytes sec: 22506.41761, Process(_Total) IO Read Bytes sec: 10460.15853, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 14798, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 5489.230337, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 1077.396595, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 6566.626931, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 4.932402129, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 6.598754199, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 11.53115633, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 4.932402129, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 6.598754199, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 104321024, Memory Free & Zero Page List Bytes: 6217728, Memory Cache Bytes Peak: 80883712, Memory System Code Resident Bytes: 1658880, Memory Available Bytes: 368205824, Memory Commit Limit: 2146951168, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0.266616331, Memory Demand Zero Faults sec: 195.8296953, Memory Available KBytes: 359576, Memory Pages sec: 0.46657858, Memory Cache Bytes: 19374080, Memory Pool Nonpaged Bytes: 55754752, Memory Page Faults sec: 801.7153082, Memory Transition Faults sec: 604.0859526, Memory System Cache Resident Bytes: 19374080, Memory Standby Cache Reserve Bytes: 191086592, Memory Page Writes sec: 0, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 68583424, Memory System Driver Resident Bytes: 3997696, Memory Standby Cache Normal Priority Bytes: 102318080, Memory Pool Paged Allocs: 78625, Memory Pool Nonpaged Allocs: 62506, Memory pct_ Committed Bytes In Use: 47.7445732, Memory Free System Page Table Entries: 33558358, Memory Available MBytes: 351, Memory Modified Page List Bytes: 20553728, Memory Cache Faults sec: 2.466201064, Memory Committed Bytes: 1025052672, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 0.46657858, Memory Pool Paged Resident Bytes: 52940800, Memory Write Copies sec: 0

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 60810, dst_ip: 192.168.1.152, dst_port: 80, proto: tcp, service: -, duration: 24.651385, src_bytes: 0, dst_bytes: 0, conn_state: S3, missed_bytes: 0, src_pkts: 3, src_ip_bytes: 164, dst_pkts: 2, dst_ip_bytes: 112, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2618, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: unity-panel-se, attack: 0

[Assistant] normal


[User] PID: 2934, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: nm-applet, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 54838, dst_ip: 52.28.231.150, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49929, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000122, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 35441, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.007829, src_bytes: 35, dst_bytes: 67, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 63, dst_pkts: 1, dst_ip_bytes: 95, dns_query: broker.hivemq.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 55301, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000073, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 172.17.0.7, src_port: 51353, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.001046, src_bytes: 0, dst_bytes: 178, conn_state: SHR, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 2, dst_ip_bytes: 234, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.33, src_port: 35923, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 103, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.180, src_port: 33425, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000414, src_bytes: 41, dst_bytes: 89, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 69, dst_pkts: 1, dst_ip_bytes: 117, dns_query: elasticsearch.mydns.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:49, FC1_Read_Input_Register: 51775, FC2_Read_Discrete_Value: 19234, FC3_Read_Holding_Register: 23696, FC4_Read_Coil: 45491

[Assistant] normal


[User] date: 2-Apr-19, time:    04:02:03   , fridge_temperature: 5, temp_condition: low

[Assistant] normal


[User] PID: 3793, RDDSK: 0, WRDSK: -, WCANCL: 0, DSK: 0, CMD: <cron>, attack: 1

[Assistant] attack


[User] date: 25-Apr-19, time:  08:42:57 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:53, current_temperature: 27.63755447, thermostat_status: 0

[Assistant] normal


[User] PID: 1483, MINFLT: 0, MAJFLT: 0, VSTEXT: 10415, VSIZE: 537.4, RSIZE: 16360, VGROW: 0, RGROW: 0, MEM: 0, CMD: mysqld

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:15, latitude: 1.881165032, longitude: 11.84907722

[Assistant] normal


[User] date: 26-Apr-19, time:  16:42:54 , temperature: 29.42508494, pressure: 6.857839535, humidity: 7.417813353

[Assistant] attack


[User] date: 25-Apr-19, time:  09:34:13 , FC1_Read_Input_Register: 3337, FC2_Read_Discrete_Value: 27091, FC3_Read_Holding_Register: 31686, FC4_Read_Coil: 24986

[Assistant] attack


[User] src_ip: 192.168.1.33, src_port: 4444, dst_ip: 192.168.1.193, dst_port: 49207, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 61172, dst_ip: 192.168.1.250, dst_port: 1048, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 42474, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.00235, src_bytes: 170, dst_bytes: 3042, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 438, dst_pkts: 7, dst_ip_bytes: 3414, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:    04:05:56   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] date: 28-Apr-19, time:  17:29:51 , current_temperature: 29.54665329, thermostat_status: 1

[Assistant] attack


[User] PID: 1893, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: Xorg, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.180, src_port: 43794, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000682, src_bytes: 41, dst_bytes: 89, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 69, dst_pkts: 1, dst_ip_bytes: 117, dns_query: elasticsearch.mydns.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.33, src_port: 36613, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 1, dst_ip_bytes: 52, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  05:08:25 , current_temperature: 28.00089095, thermostat_status: 1

[Assistant] attack


[User] PID: 2575, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: upstart-dbus-b, attack: 1

[Assistant] attack


[User] PID: 4373, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] date: 1-Apr-19, time:  20:38:41 , motion_status: 0, light_status:  off

[Assistant] normal


[User] date: 2-Apr-19, time:    04:02:14   , fridge_temperature: 2, temp_condition: low

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 59643, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000029, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 57834, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: -, duration: 0.016762, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:  04:06:50 , motion_status: 0, light_status:  off

[Assistant] normal


[User] date: 25-Apr-19, time: 8:53:14, motion_status: 0, light_status:  off

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 47812, dst_ip: 192.168.1.152, dst_port: 80, proto: tcp, service: http, duration: 0.05164, src_bytes: 183, dst_bytes: 3440, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 451, dst_pkts: 7, dst_ip_bytes: 3812, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:    04:05:21   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] src_ip: 192.168.1.33, src_port: 4444, dst_ip: 192.168.1.193, dst_port: 49207, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3897, TRUN: 1, TSLPI: 0, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: R, CPU: 0.01, CMD: atop

[Assistant] attack


[User] PID: 1496, MINFLT: 0, MAJFLT: 0, VSTEXT: 2219, VSIZE: 348.3, RSIZE: 78996, VGROW: 0, RGROW: 0, MEM: 0.02, CMD: Xorg

[Assistant] attack


[User] PID: 3793, MINFLT: 0, MAJFLT: 0, VSTEXT: 978, VSIZE: 2.9, RSIZE: 10108, VGROW: 0, RGROW: 0, MEM: 0, CMD: drone

[Assistant] normal


[User] PID: 8056, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vsftpd, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49588, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000101, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:49, current_temperature: 28.26905311, thermostat_status: 1

[Assistant] normal


[User] date: 28-Apr-19, time:  04:36:31 , current_temperature: 25.9414131, thermostat_status: 1

[Assistant] attack


[User] date: 2-Apr-19, time:  04:06:54 , current_temperature: 25.88937628, thermostat_status: 1

[Assistant] normal


[User] src_ip: 192.168.1.37, src_port: 34773, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 60, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2797, MINFLT: 8, MAJFLT: 0, VSTEXT: 1350, VSIZE: 1.4, RSIZE: 24928, VGROW: 0, RGROW: 0, MEM: 0.01, CMD: nautilus

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 61383, dst_ip: 192.168.1.190, dst_port: 199, proto: tcp, service: -, duration: 0.003299, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:  00:13:53 , current_temperature: 25, thermostat_status: 0

[Assistant] normal


[User] PID: 2444, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: upstart-event-, attack: 0

[Assistant] normal


[User] date: 26-Apr-19, time: 14:38:02, motion_status: 0, light_status:  off

[Assistant] attack


[User] date: 28-Apr-19, time:  12:17:19 , FC1_Read_Input_Register: 36922, FC2_Read_Discrete_Value: 39790, FC3_Read_Holding_Register: 15015, FC4_Read_Coil: 7866

[Assistant] attack


[User] date: 1-Apr-19, time:  23:51:42 , current_temperature: 25.93294424, thermostat_status: 1

[Assistant] normal


[User] date: 2-Apr-19, time:  04:06:39 , motion_status: 0, light_status:  off

[Assistant] normal


[User] PID: 1851, TRUN: 0, TSLPI: 2, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: vmtoolsd

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 1880, dst_ip: 192.168.1.152, dst_port: 51782, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 6153, RDDSK: 0, WRDSK: 4, WCANCL: 0, DSK: 0.04, CMD: apache2, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 21, dst_ip: 192.168.1.152, dst_port: 21, proto: tcp, service: -, duration: 0.00002, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 1880, dst_ip: 192.168.1.152, dst_port: 51782, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 49503, dst_ip: 192.168.1.250, dst_port: 3005, proto: tcp, service: -, duration: 0.573237, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 80, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: -, duration: 0.00053, src_bytes: 0, dst_bytes: 0, conn_state: RSTO, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 80, dst_pkts: 1, dst_ip_bytes: 44, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.195, src_port: 1720, dst_ip: 192.168.1.195, dst_port: 1720, proto: tcp, service: -, duration: 0.228881, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:05, latitude: 2.182565773, longitude: 12.54943182

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 58789, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.00002, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 2499, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: 0, EXC: 0, State: S, CPU: 0, CMD: dbus-daemon

[Assistant] attack


[User] PID: 1401, MINFLT: 13, MAJFLT: 0, VSTEXT: 36, VSIZE: 19296, RSIZE: 824, VGROW: 0, RGROW: 0, MEM: 0, CMD: irqbalance

[Assistant] attack


[User] date: 28-Apr-19, time:  04:46:12 , latitude: 11.34960811, longitude: 20.43390707

[Assistant] attack


[User] date: 28-Apr-19, time:  05:23:03 , latitude: 30.96777384, longitude: 40.52868111

[Assistant] attack


[User] PID: 3295, MINFLT: 1909, MAJFLT: 0, VSTEXT: 148, VSIZE: 17920, RSIZE: 2416, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] attack


[User] date: 25-Apr-19, time:  16:14:56 , fridge_temperature: 10.25, temp_condition: high

[Assistant] attack


[User] src_ip: 192.168.1.250, src_port: 5353, dst_ip: 224.0.0.251, dst_port: 5353, proto: udp, service: dns, duration: 13.096768, src_bytes: 128, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 4, src_ip_bytes: 240, dst_pkts: 0, dst_ip_bytes: 0, dns_query: _fb._tcp.local, dns_qclass: 32769, dns_qtype: 12, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 3675, MINFLT: 2076, MAJFLT: 0, VSTEXT: 148, VSIZE: 17948, RSIZE: 2604, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 34296, dst_ip: 192.168.1.152, dst_port: 10502, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 25-Apr-19, time:  08:37:34 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 34968, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.014149, src_bytes: 78, dst_bytes: 438, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 134, dst_pkts: 2, dst_ip_bytes: 494, dns_query: staticxx.facebook.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 4373, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49870, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.000138, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 42, dst_ip: 192.168.1.193, dst_port: 42, proto: tcp, service: -, duration: 0.000501, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 26-Apr-19, time: 15:08:20, motion_status: 0, light_status:  off

[Assistant] attack


[User] Processor(_Total) DPC Rate: 0, Processor(_Total) pct_ Idle Time: 96.19791667, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 3.541666667, Processor(_Total) pct_ C1 Time: 93.33333333, Processor(_Total) pct_ Processor Time: 3.802083333, Processor(_Total) C1 Transitions sec: 320.3336857, Processor(_Total) pct_ DPC Time: 0.052083333, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 0.260416667, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 18.20002002, Processor(_Total) Interrupts sec: 246.6002713, Process(_Total) Pool Paged Bytes: 10213616, Process(_Total) IO Read Operations sec: 9.0000099, Process(_Total) Working Set - Private: 1029427200, Process(_Total) Working Set Peak: 2088415232, Process(_Total) IO Write Operations sec: 5.93333986, Process(_Total) Page File Bytes: 1534955520, Process(_Total) pct_ User Time: 7.083333333, Process(_Total) Virtual Bytes Peak: 8749469696, Process(_Total) Page File Bytes Peak: 1789349888, Process(_Total) IO Other Bytes sec: 4459.071572, Process(_Total) Private Bytes: 1534955520, Process(_Total) IO Write Bytes sec: 11600.41276, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 7587368960, Process(_Total) pct_ Processor Time: 199.8958333, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1280648, Process(_Total) Working Set: 1359749120, Process(_Total) Page Faults sec: 580.4006384, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 234.2002576, Process(_Total) IO Data Operations sec: 14.93334976, Process(_Total) Thread Count: 627, Process(_Total) pct_ Privileged Time: 192.8125, Process(_Total) IO Data Bytes sec: 20745.08949, Process(_Total) IO Read Bytes sec: 9144.676726, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 16525, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 2968.269932, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 409.6004506, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 3377.870382, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 6.80000748, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 10.26667796, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 17.06668544, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 6.80000748, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 10.26667796, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 110260224, Memory Free & Zero Page List Bytes: 121122816, Memory Cache Bytes Peak: 139370496, Memory System Code Resident Bytes: 45056, Memory Available Bytes: 862187520, Memory Commit Limit: 6070345728, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 2.0000022, Memory Demand Zero Faults sec: 617.5340126, Memory Available KBytes: 841980, Memory Pages sec: 2.0000022, Memory Cache Bytes: 27508736, Memory Pool Nonpaged Bytes: 71974912, Memory Page Faults sec: 722.3341279, Memory Transition Faults sec: 100.4667772, Memory System Cache Resident Bytes: 27508736, Memory Standby Cache Reserve Bytes: 388665344, Memory Page Writes sec: 0, Memory System Code Total Bytes: 4370432, Memory Standby Cache Core Bytes: 96100352, Memory System Driver Resident Bytes: 3731456, Memory Standby Cache Normal Priority Bytes: 256299008, Memory Pool Paged Allocs: 87836, Memory Pool Nonpaged Allocs: 97351, Memory pct_ Committed Bytes In Use: 44.2126209, Memory Free System Page Table Entries: 33556544, Memory Available MBytes: 822, Memory Modified Page List Bytes: 23683072, Memory Cache Faults sec: 4.93333876, Memory Committed Bytes: 2683858944, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 2.0000022, Memory Pool Paged Resident Bytes: 53469184, Memory Write Copies sec: 7.73334184

[Assistant] attack


[User] date: 2-Apr-19, time:    04:02:00   , fridge_temperature: 8.8, temp_condition: high

[Assistant] normal


[User] date: 31-Mar-19, time:    12:39:34   , fridge_temperature: 7.25, temp_condition: high

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:22, temperature: 37.88793465, pressure: 0.16433469, humidity: 75.28925151

[Assistant] normal


[User] Processor_DPC_Rate: 5, Processor_pct_ Idle_Time: 45.48501008, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.156251364, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 14.53137686, Processor_pct_ C1_Time: 45.48501008, Processor_pct_ Processor_Time: 46.9526619, Processor_C1_ransitions_sec: 3150.807247, Processor_pct_ DPC_Time: 1.328136595, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 32.42215805, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 2069.804761, Processor_Interrupts_sec: 6681.815368, Process_Pool_Paged Bytes: 24609184, Process_IO Read_Operations_sec: 5.80001334, Process_Working_Set_ Private: 1713004544, Process_Working_Set_Peak: 5958127616, Process_IO_Write Operations_sec: 1.20000276, Process_Page_File Bytes: 4988862464, Process_pct_ User_Time: 29.06275372, Process_Virtual_Bytes Peak: 1.57E+14, Process_Page_File Bytes Peak: 6030516224, Process_IO_Other_Bytes_sec: 2889.106645, Process_Private_Bytes: 4988862464, Process_IO_Write_Bytes_sec: 156.4003597, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.57E+14, Process_pct_ Processor_Time: 197.0329701, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 3084432, Process_Working Set: 1784004608, Process_Page Faults_sec: 35372.68136, Process_ID Process: 0, Process_IO Other Operations_sec: 77.30017779, Process_IO Data Operations_sec: 7.0000161, Process_Thread Count: 1037, Process_pct_ Privileged_Time: 167.9702164, Process_IO Data Bytes_sec: 1327.403053, Process_IO Read Bytes_sec: 1171.002693, Process_Priority Base: 0, Process_Handle Count: 39927, Network_I(Intel R _82574L_GNC)TCP_APS: 5483, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4834.211119, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 258.0005934, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5092.211712, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 4.80001104, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 6.70001541, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 11.50002645, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 1, Network_I(Intel R _82574L_GNC) Packets Sent sec: 4.80001104, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 6.70001541, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 105639936, Memory Free & Zero Page List Bytes: 1900544, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 535642112, Memory Commit Limit: 6891933696, Memory Transition Pages RePurposed sec: 12963.52982, Memory Pages Output sec: 895.0020585, Memory Page Reads sec: 1939.00446, Memory Demand Zero Faults sec: 6575.515124, Memory Available KBytes: 523088, Memory Pages sec: 5845.313444, Memory Cache Bytes: 974848, Memory Pool Nonpaged Bytes: 112713728, Memory Page Faults sec: 35443.78152, Memory Transition Faults sec: 13317.53063, Memory System Cache Resident Bytes: 974848, Memory Long-Term Average Standby Cache Lifetime (s): 22, Memory Standby Cache Reserve Bytes: 186228736, Memory Page Writes sec: 47.40010902, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 226361344, Memory System Driver Resident Bytes: 1.76E+13, Memory Standby Cache Normal Priority Bytes: 121155584, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 86.09468315, Memory Free System Page Table Entries: 12209255, Memory Available MBytes: 510, Memory Modified Page List Bytes: 107008000, Memory Cache Faults sec: 1.80000414, Memory Committed Bytes: 5933588480, Memory System Driver Total Bytes: 18178048, Memory Pages Input sec: 4950.311386, Memory Pool Paged Resident Bytes: 21663744, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 76609.73695, LogicalDisk(_Total) pct_ Idle Time: 81.099244, LogicalDisk(_Total) Disk Reads sec: 1882.204329, LogicalDisk(_Total) pct_ Free Space: 82.09544471, LogicalDisk(_Total) Disk Read Bytes sec: 21014166.73, LogicalDisk(_Total) Avg  Disk sec Read: 0.000361167, LogicalDisk(_Total) Disk Writes sec: 47.90011017, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 168019, LogicalDisk(_Total) Avg  Disk sec Write: 0.000289438, LogicalDisk(_Total) Disk Bytes sec: 24683781.57, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.679794275, LogicalDisk(_Total) pct_ Disk Time: 23.12194985, LogicalDisk(_Total) Avg  Disk Bytes Read: 11164.65753, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.013864221, LogicalDisk(_Total) Avg  Disk Queue Length: 0.693658496, LogicalDisk(_Total) pct_ Disk Read Time: 22.65980982, LogicalDisk(_Total) Disk Write Bytes sec: 3669614.84, LogicalDisk(_Total) Disk Transfers sec: 1930.104439, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 12788.83208, LogicalDisk(_Total) pct_ Disk Write Time: 0.462140034, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000359387

[Assistant] normal


[User] src_ip: 2405:6e00:10ce:2c00:20c:29ff:feee:e07a, src_port: 3069, dst_ip: 2001:503:c27::2:30, dst_port: 53, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 76, dst_pkts: 0, dst_ip_bytes: 0, dns_query: (empty), dns_qclass: 1, dns_qtype: 2, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 45288, dst_ip: 150.101.217.196, dst_port: 123, proto: udp, service: -, duration: 0.042183, src_bytes: 48, dst_bytes: 48, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 76, dst_pkts: 1, dst_ip_bytes: 76, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 5152, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: kworker/u256:3

[Assistant] attack


[User] date: 2-Apr-19, time:  04:06:22 , current_temperature: 27.2095841, thermostat_status: 1

[Assistant] normal


[User] date: 31-Mar-19, time: 12:42:13, temperature: 22.46713287, pressure: 0.25811909, humidity: 56.01112397

[Assistant] normal


[User] src_ip: 192.168.1.180, src_port: 42730, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.089114, src_bytes: 31, dst_bytes: 106, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 59, dst_pkts: 1, dst_ip_bytes: 134, dns_query: elasticsearch, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 28-Apr-19, time:  17:16:04 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 87, dst_ip: 192.168.1.194, dst_port: 87, proto: tcp, service: -, duration: 0.000012, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1558, MINFLT: 166, MAJFLT: 0, VSTEXT: 82, VSIZE: 39656, RSIZE: 280, VGROW: 39656, RGROW: 280, MEM: 0, CMD: admind

[Assistant] normal


[User] date: 25-Apr-19, time:  19:22:45 , fridge_temperature: 10.7, temp_condition: high

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 50852, dst_ip: 176.28.50.165, dst_port: 21, proto: tcp, service: ftp, duration: 3.436347, src_bytes: 83, dst_bytes: 215, conn_state: SF, missed_bytes: 0, src_pkts: 18, src_ip_bytes: 1027, dst_pkts: 12, dst_ip_bytes: 823, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 8031, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vsftpd, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 60866, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: -, duration: 0.000306, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:40:05, motion_status: 0, light_status:  off

[Assistant] normal


[User] date: 28-Apr-19, time:  23:45:58 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] date: 27-Apr-19, time:  05:24:42 , fridge_temperature: 11.25, temp_condition: high

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:15, FC1_Read_Input_Register: 12458, FC2_Read_Discrete_Value: 9956, FC3_Read_Holding_Register: 31453, FC4_Read_Coil: 34409

[Assistant] normal


[User] date: 1-Apr-19, time:  19:12:17 , current_temperature: 29.68011135, thermostat_status: 1

[Assistant] normal


[User] PID: 2547, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: unity-panel-se

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 35974, dst_ip: 104.16.78.166, dst_port: 443, proto: tcp, service: ssl, duration: 0.460926, src_bytes: 525, dst_bytes: 4089, conn_state: SF, missed_bytes: 0, src_pkts: 15, src_ip_bytes: 1145, dst_pkts: 12, dst_ip_bytes: 4581, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 43119, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.00463, src_bytes: 58, dst_bytes: 58, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 86, dst_pkts: 1, dst_ip_bytes: 86, dns_query: testphp.vulnweb.com/listproducts.php.hub, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: T, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:42:49, temperature: 47.14607597, pressure: -0.130400849, humidity: 9.130803996

[Assistant] normal


[User] date: 1-Apr-19, time:  15:15:49 , latitude: 11.30059289, longitude: 20.72116644

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 47960, dst_ip: 192.168.1.152, dst_port: 80, proto: tcp, service: http, duration: 17.022592, src_bytes: 3619, dst_bytes: 1643, conn_state: S3, missed_bytes: 0, src_pkts: 12, src_ip_bytes: 4323, dst_pkts: 11, dst_ip_bytes: 2223, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 48154, dst_ip: 182.50.136.239, dst_port: 80, proto: tcp, service: http, duration: 0.450418, src_bytes: 423, dst_bytes: 2268, conn_state: SF, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 743, dst_pkts: 7, dst_ip_bytes: 2628, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2122, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 16, dst_ip: 192.168.1.152, dst_port: 16, proto: tcp, service: -, duration: 0.000371, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time: 5:03:11, temperature: 38.53048869, pressure: 6.035180272, humidity: 8.299987184

[Assistant] attack


[User] PID: 3676, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.184, src_port: 8080, dst_ip: 192.168.1.184, dst_port: 1641, proto: tcp, service: -, duration: 0.196271, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:34, FC1_Read_Input_Register: 36027, FC2_Read_Discrete_Value: 62991, FC3_Read_Holding_Register: 6943, FC4_Read_Coil: 9151

[Assistant] normal


[User] date: 28-Apr-19, time: 14:40:28, motion_status: 0, light_status:  off

[Assistant] attack


[User] PID: 1467, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] PID: 2832, TRUN: 0, TSLPI: 59, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: firefox

[Assistant] attack


[User] date: 1-Apr-19, time:  18:54:12 , current_temperature: 32.56558598, thermostat_status: 1

[Assistant] normal


[User] PID: 2460, MINFLT: 0, MAJFLT: 0, VSTEXT: 281, VSIZE: 609.8, RSIZE: 10008, VGROW: 0, RGROW: 0, MEM: 0, CMD: bamfdaemon

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 55836, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000064, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.37, src_port: 39275, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:40:05, motion_status: 1, light_status:  on

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 33342, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: -, duration: 0.001115, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 34296, dst_ip: 192.168.1.152, dst_port: 10502, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 2523, MINFLT: 0, MAJFLT: 0, VSTEXT: 31, VSIZE: 931.9, RSIZE: 20796, VGROW: 0, RGROW: 0, MEM: 0.01, CMD: unity-settings

[Assistant] normal


[User] PID: 1371, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: irqbalance

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:43, latitude: 3.744266734, longitude: 13.61524616

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:44, latitude: 0.923848411, longitude: 11.03940725

[Assistant] normal


[User] date: 28-Apr-19, time:  04:20:45 , latitude: 7.746235353, longitude: 18.71803254

[Assistant] attack


[User] PID: 1663, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: haveged, attack: 0

[Assistant] normal


[User] src_ip: 2405:6e00:10ce:2c00:20c:29ff:feee:e07a, src_port: 37382, dst_ip: 2001:503:ba3e::2:30, dst_port: 53, proto: udp, service: dns, duration: 0.163354, src_bytes: 28, dst_bytes: 1097, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 76, dst_pkts: 1, dst_ip_bytes: 1145, dns_query: (empty), dns_qclass: 1, dns_qtype: 2, dns_rcode: 0, dns_AA: T, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: DNS_RR_unknown_type, weird_addl: 46, weird_notice: F

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 38818, dst_ip: 192.168.1.152, dst_port: 80, proto: tcp, service: http, duration: 0.189087, src_bytes: 314, dst_bytes: 3440, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 582, dst_pkts: 6, dst_ip_bytes: 3760, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2698, MINFLT: 0, MAJFLT: 0, VSTEXT: 357, VSIZE: 808.8, RSIZE: 3860, VGROW: 0, RGROW: 24, MEM: 0, CMD: indicator-sess

[Assistant] normal


[User] PID: 11208, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] date: 25-Apr-19, time:  18:45:01 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] PID: 14169, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <pop3-login>, attack: 1

[Assistant] attack


[User] PID: 10688, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vsftpd, attack: 0

[Assistant] normal


[User] PID: 2938, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: nautilus, attack: 0

[Assistant] normal


[User] PID: 4132, RDDSK: 0, WRDSK: 12, WCANCL: 0, DSK: 0, CMD: atop, attack: 1

[Assistant] attack


[User] Processor_DPC_Rate: 24, Processor_pct_ Idle_Time: 64.95948838, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 28.4375492, Processor_pct_ C1_Time: 64.95948838, Processor_pct_ Processor_Time: 33.82801052, Processor_C1_ransitions_sec: 310.2000931, Processor_pct_ DPC_Time: 0.078125135, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 5.390634326, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 98.10002943, Processor_Interrupts_sec: 1084.000325, Process_Pool_Paged Bytes: 24565352, Process_IO Read_Operations_sec: 5.80000174, Process_Working_Set_ Private: 1879515136, Process_Working_Set_Peak: 5847740416, Process_IO_Write Operations_sec: 1.60000048, Process_Page_File Bytes: 3719852032, Process_pct_ User_Time: 56.87509839, Process_Virtual_Bytes Peak: 1.57E+14, Process_Page_File Bytes Peak: 4716056576, Process_IO_Other_Bytes_sec: 5007.601502, Process_Private_Bytes: 3719852032, Process_IO_Write_Bytes_sec: 205.8000617, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.57E+14, Process_pct_ Processor_Time: 199.8440957, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2698384, Process_Working Set: 1992675328, Process_Page Faults_sec: 3809.501143, Process_ID Process: 0, Process_IO Other Operations_sec: 100.2000301, Process_IO Data Operations_sec: 7.40000222, Process_Thread Count: 1063, Process_pct_ Privileged_Time: 142.9689973, Process_IO Data Bytes_sec: 1376.800413, Process_IO Read Bytes_sec: 1171.000351, Process_Priority Base: 0, Process_Handle Count: 39857, Network_I(Intel R _82574L_GNC)TCP_APS: 5844, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4805.701442, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 199.8000599, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5005.501502, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 3.70000111, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 6.20000186, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 9.90000297, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 3, Network_I(Intel R _82574L_GNC) Packets Sent sec: 3.70000111, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 6.20000186, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 105308160, Memory Free & Zero Page List Bytes: 2064384, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 453496832, Memory Commit Limit: 5674004480, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 651.7001955, Memory Page Reads sec: 43.0000129, Memory Demand Zero Faults sec: 1333.3004, Memory Available KBytes: 442868, Memory Pages sec: 946.800284, Memory Cache Bytes: 1454080, Memory Pool Nonpaged Bytes: 97419264, Memory Page Faults sec: 3820.501146, Memory Transition Faults sec: 1594.600478, Memory System Cache Resident Bytes: 1454080, Memory Long-Term Average Standby Cache Lifetime (s): 163, Memory Standby Cache Reserve Bytes: 136503296, Memory Page Writes sec: 25.70000771, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 218775552, Memory System Driver Resident Bytes: 1.76E+13, Memory Standby Cache Normal Priority Bytes: 96149504, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 82.16963661, Memory Free System Page Table Entries: 12208507, Memory Available MBytes: 432, Memory Modified Page List Bytes: 3530752, Memory Cache Faults sec: 1.80000054, Memory Committed Bytes: 4662308864, Memory System Driver Total Bytes: 18178048, Memory Pages Input sec: 295.1000885, Memory Pool Paged Resident Bytes: 29171712, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 102400, LogicalDisk(_Total) pct_ Idle Time: 99.31018981, LogicalDisk(_Total) Disk Reads sec: 43.0000129, LogicalDisk(_Total) pct_ Free Space: 82.67786556, LogicalDisk(_Total) Disk Read Bytes sec: 1208729.963, LogicalDisk(_Total) Avg  Disk sec Read: 0.000372133, LogicalDisk(_Total) Disk Writes sec: 26.10000783, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 169211, LogicalDisk(_Total) Avg  Disk sec Write: 0.00024199, LogicalDisk(_Total) Disk Bytes sec: 3881370.764, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.016001758, LogicalDisk(_Total) pct_ Disk Time: 0.743923287, LogicalDisk(_Total) Avg  Disk Bytes Read: 28109.9907, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.006315941, LogicalDisk(_Total) Avg  Disk Queue Length: 0.022317699, LogicalDisk(_Total) pct_ Disk Read Time: 0.533391923, LogicalDisk(_Total) Disk Write Bytes sec: 2672640.802, LogicalDisk(_Total) Disk Transfers sec: 69.10002073, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 56170.32706, LogicalDisk(_Total) pct_ Disk Write Time: 0.210531364, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000322976

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 92, dst_ip: 192.168.1.184, dst_port: 92, proto: tcp, service: -, duration: 0.000039, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2797, MINFLT: 8, MAJFLT: 0, VSTEXT: 1350, VSIZE: 1.4, RSIZE: 25000, VGROW: 0, RGROW: 0, MEM: 0.01, CMD: nautilus

[Assistant] normal


[User] date: 31-Mar-19, time: 12:42:33, FC1_Read_Input_Register: 31967, FC2_Read_Discrete_Value: 37715, FC3_Read_Holding_Register: 1297, FC4_Read_Coil: 37140

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 45914, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.000036, src_bytes: 155, dst_bytes: 651, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 423, dst_pkts: 5, dst_ip_bytes: 919, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 33008, dst_ip: 192.168.1.152, dst_port: 80, proto: tcp, service: http, duration: 0.168216, src_bytes: 204, dst_bytes: 3440, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 472, dst_pkts: 7, dst_ip_bytes: 3812, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 49649, dst_ip: 192.168.1.250, dst_port: 993, proto: tcp, service: -, duration: 0.862067, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time: 4:50:21, temperature: 38.53964302, pressure: 1.226258414, humidity: 22.79955931

[Assistant] attack


[User] src_ip: 192.168.1.37, src_port: 42515, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 184, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2199, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: gnome-shell, attack: 1

[Assistant] attack


[User] PID: 2874, MINFLT: 0, MAJFLT: 0, VSTEXT: 72, VSIZE: 207.5, RSIZE: 3848, VGROW: 0, RGROW: 8, MEM: 0, CMD: gvfs-gphoto2-v

[Assistant] normal


[User] PID: 2896, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 5, Status: -, EXC: 0, State: S, CPU: 0, CMD: update-notifie

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 37704, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.318036, src_bytes: 504, dst_bytes: 1308, conn_state: SF, missed_bytes: 0, src_pkts: 12, src_ip_bytes: 840, dst_pkts: 6, dst_ip_bytes: 1476, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3897, RDDSK: 0, WRDSK: 16, WCANCL: 0, DSK: 0.1, CMD: atop, attack: 0

[Assistant] normal


[User] Processor(_Total) DPC Rate: 38, Processor(_Total) pct_ Idle Time: 52.8125, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.104166667, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 11.25, Processor(_Total) pct_ C1 Time: 53.33333333, Processor(_Total) pct_ Processor Time: 47.1875, Processor(_Total) C1 Transitions sec: 2728.073807, Processor(_Total) pct_ DPC Time: 0.3125, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 35.9375, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 3094.065821, Processor(_Total) Interrupts sec: 4644.965314, Process(_Total) Pool Paged Bytes: 7783160, Process(_Total) IO Read Operations sec: 155.9299309, Process(_Total) Working Set - Private: 801189888, Process(_Total) Working Set Peak: 1999794176, Process(_Total) IO Write Operations sec: 187.7292371, Process(_Total) Page File Bytes: 2220572672, Process(_Total) pct_ User Time: 11.25, Process(_Total) Virtual Bytes Peak: 7873110016, Process(_Total) Page File Bytes Peak: 2562412544, Process(_Total) IO Other Bytes sec: 4128.709912, Process(_Total) Private Bytes: 2220572672, Process(_Total) IO Write Bytes sec: 75308.55677, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6850088960, Process(_Total) pct_ Processor Time: 99.58333333, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1196032, Process(_Total) Working Set: 856080384, Process(_Total) Page Faults sec: 5579.211595, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 164.9963998, Process(_Total) IO Data Operations sec: 343.659168, Process(_Total) Thread Count: 547, Process(_Total) pct_ Privileged Time: 88.33333333, Process(_Total) IO Data Bytes sec: 150056.0591, Process(_Total) IO Read Bytes sec: 74747.50234, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13362, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 22244.78129, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 397.9913158, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 22642.7726, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 6.999847263, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 16.39964216, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 23.39948942, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 6.999847263, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 16.39964216, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 91025408, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 696320, Memory Available Bytes: 10678272, Memory Commit Limit: 2885148672, Memory Transition Pages RePurposed sec: 9664.522453, Memory Pages Output sec: 4611.632708, Memory Page Reads sec: 2919.002974, Memory Demand Zero Faults sec: 788.849454, Memory Available KBytes: 10428, Memory Pages sec: 15337.79866, Memory Cache Bytes: 229376, Memory Pool Nonpaged Bytes: 52789248, Memory Page Faults sec: 5756.341063, Memory Transition Faults sec: 2118.553773, Memory System Cache Resident Bytes: 229376, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 561.9210722, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 516096, Memory System Driver Resident Bytes: 1351680, Memory Standby Cache Normal Priority Bytes: 10162176, Memory Pool Paged Allocs: 58717, Memory Pool Nonpaged Allocs: 51321, Memory pct_ Committed Bytes In Use: 89.18385194, Memory Free System Page Table Entries: 33562140, Memory Available MBytes: 10, Memory Modified Page List Bytes: 61440, Memory Cache Faults sec: 0.466656484, Memory Committed Bytes: 2573086720, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 10726.16596, Memory Pool Paged Resident Bytes: 10727424, Memory Write Copies sec: 0

[Assistant] normal


[User] src_ip: 192.168.1.17, src_port: 62250, dst_ip: 224.0.0.252, dst_port: 5355, proto: udp, service: dns, duration: 0.004864, src_bytes: 66, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 122, dst_pkts: 0, dst_ip_bytes: 0, dns_query: desktop-p3kklkq, dns_qclass: 1, dns_qtype: 255, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 42296, dst_ip: 151.101.24.134, dst_port: 443, proto: tcp, service: ssl, duration: 125.999781, src_bytes: 3117, dst_bytes: 707, conn_state: SF, missed_bytes: 0, src_pkts: 24, src_ip_bytes: 4349, dst_pkts: 19, dst_ip_bytes: 1703, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2240, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: gsd-xsettings, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.190, src_port: 1907, dst_ip: 192.168.1.190, dst_port: 1907, proto: tcp, service: -, duration: 0.327086, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.194, src_port: 80, dst_ip: 192.168.1.194, dst_port: 1432, proto: tcp, service: -, duration: 0.271037, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 25-Apr-19, time: 8:18:23, temperature: 36.14210477, pressure: 0.399205757, humidity: 77.5274234

[Assistant] attack