[User] src_ip: 192.168.1.31, src_port: 56674, dst_ip: 151.101.24.134, dst_port: 443, proto: tcp, service: -, duration: 3.548395, src_bytes: 32, dst_bytes: 31, conn_state: SF, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 307, dst_pkts: 5, dst_ip_bytes: 291, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:40, FC1_Read_Input_Register: 60637, FC2_Read_Discrete_Value: 55068, FC3_Read_Holding_Register: 39378, FC4_Read_Coil: 25990

[Assistant] normal


[User] src_ip: 192.168.1.37, src_port: 38057, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 60, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3675, MINFLT: 1824, MAJFLT: 0, VSTEXT: 148, VSIZE: 17948, RSIZE: 2436, VGROW: 4, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 42909, dst_ip: 192.168.1.103, dst_port: 13456, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3295, MINFLT: 2052, MAJFLT: 0, VSTEXT: 148, VSIZE: 17920, RSIZE: 2492, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 43616, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000361, src_bytes: 0, dst_bytes: 298, conn_state: SHR, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 2, dst_ip_bytes: 354, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:38, temperature: 32.05278919, pressure: 1.035, humidity: 42.67587492

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 44506, dst_ip: 192.168.1.152, dst_port: 80, proto: tcp, service: http, duration: 0.002354, src_bytes: 153, dst_bytes: 463, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 421, dst_pkts: 5, dst_ip_bytes: 731, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1134, RDDSK: 0, WRDSK: 4, WCANCL: 0, DSK: 0.03, CMD: vsftpd, attack: 0

[Assistant] normal


[User] PID: 2794, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: nautilus, attack: 1

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:55, current_temperature: 26.94745165, thermostat_status: 1

[Assistant] normal


[User] date: 26-Apr-19, time: 13:46:09, motion_status: 1, light_status:  on

[Assistant] attack


[User] date: 28-Apr-19, time:  22:37:54 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 35530, dst_ip: 192.168.1.49, dst_port: 22, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 50087, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000217, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2500, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: dbus-daemon, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.194, src_port: 80, dst_ip: 192.168.1.194, dst_port: 1394, proto: tcp, service: -, duration: 0.200934, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:33, temperature: 26.41657229, pressure: 1.943690858, humidity: 84.1368568

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 61171, dst_ip: 192.168.1.133, dst_port: 1079, proto: tcp, service: -, duration: 0.683857, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1401, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: 0, EXC: 0, State: S, CPU: 0, CMD: irqbalance

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 86, dst_ip: 192.168.1.193, dst_port: 86, proto: tcp, service: -, duration: 0.000637, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 26-Apr-19, time:  18:07:56 , current_temperature: 27.26616485, thermostat_status: 1

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 34934, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3894, RDDSK: 0, WRDSK: 20, WCANCL: 0, DSK: 0.23, CMD: atop, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 1880, dst_ip: 192.168.1.152, dst_port: 51782, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 57114, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.000007, src_bytes: 168, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 4, src_ip_bytes: 280, dst_pkts: 0, dst_ip_bytes: 0, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:54, current_temperature: 28.80565334, thermostat_status: 1

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 53376, dst_ip: 117.18.232.200, dst_port: 443, proto: tcp, service: ssl, duration: 0.273895, src_bytes: 302, dst_bytes: 7254, conn_state: SF, missed_bytes: 7028, src_pkts: 7, src_ip_bytes: 602, dst_pkts: 4, dst_ip_bytes: 398, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2547, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: unity-panel-se

[Assistant] normal


[User] Processor(_Total) DPC Rate: 51, Processor(_Total) pct_ Idle Time: 71.87032076, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 0.937438966, Processor(_Total) pct_ C1 Time: 73.32855916, Processor(_Total) pct_ Processor Time: 28.12967924, Processor(_Total) C1 Transitions sec: 3015.801666, Processor(_Total) pct_ DPC Time: 0.20831977, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 27.18573003, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 2921.003709, Processor(_Total) Interrupts sec: 4270.974613, Process(_Total) Pool Paged Bytes: 7857656, Process(_Total) IO Read Operations sec: 2.666609192, Process(_Total) Working Set - Private: 731308032, Process(_Total) Working Set Peak: 2076585984, Process(_Total) IO Write Operations sec: 1.999956894, Process(_Total) Page File Bytes: 2092867584, Process(_Total) pct_ User Time: 0.937438966, Process(_Total) Virtual Bytes Peak: 8098504704, Process(_Total) Page File Bytes Peak: 2769838080, Process(_Total) IO Other Bytes sec: 14212.627, Process(_Total) Private Bytes: 2092867584, Process(_Total) IO Write Bytes sec: 4941.626825, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6793682944, Process(_Total) pct_ Processor Time: 99.78516999, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1049856, Process(_Total) Working Set: 792399872, Process(_Total) Page Faults sec: 5734.543068, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 688.5184935, Process(_Total) IO Data Operations sec: 4.666566087, Process(_Total) Thread Count: 558, Process(_Total) pct_ Privileged Time: 98.84773102, Process(_Total) IO Data Bytes sec: 5218.220863, Process(_Total) IO Read Bytes sec: 276.5940385, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13900, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 169.5963446, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 133.6637858, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 303.2601304, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 1.266639366, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 1.199974137, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 2.466613503, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 1.266639366, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 1.199974137, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 92917760, Memory Free & Zero Page List Bytes: 27230208, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 1179648, Memory Available Bytes: 40706048, Memory Commit Limit: 2918703104, Memory Transition Pages RePurposed sec: 5472.215389, Memory Pages Output sec: 7141.246082, Memory Page Reads sec: 2409.21474, Memory Demand Zero Faults sec: 1361.103997, Memory Available KBytes: 39752, Memory Pages sec: 12485.39756, Memory Cache Bytes: 1560576, Memory Pool Nonpaged Bytes: 79368192, Memory Page Faults sec: 5923.73899, Memory Transition Faults sec: 2154.686893, Memory System Cache Resident Bytes: 1560576, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 782.649798, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 585728, Memory System Driver Resident Bytes: 1548288, Memory Standby Cache Normal Priority Bytes: 12890112, Memory Pool Paged Allocs: 59354, Memory Pool Nonpaged Allocs: 58085, Memory pct_ Committed Bytes In Use: 84.68060861, Memory Free System Page Table Entries: 33562140, Memory Available MBytes: 38, Memory Modified Page List Bytes: 12288, Memory Cache Faults sec: 1.933291664, Memory Committed Bytes: 2471575552, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 5344.151482, Memory Pool Paged Resident Bytes: 16748544, Memory Write Copies sec: 0

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:38, latitude: 2.351576471, longitude: 12.17134833

[Assistant] normal


[User] PID: 2420, MINFLT: 0, MAJFLT: 0, VSTEXT: 415, VSIZE: 40212, RSIZE: 1800, VGROW: 0, RGROW: 0, MEM: 0, CMD: dbus-daemon

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 75.83844545, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 22.26571673, Processor_pct_ C1_Time: 75.83844545, Processor_pct_ Processor_Time: 23.74968585, Processor_C1_ransitions_sec: 144.0017871, Processor_pct_ DPC_Time: 0, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 1.484381116, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 27.50034128, Processor_Interrupts_sec: 652.4080964, Process_Pool_Paged Bytes: 22017896, Process_IO Read_Operations_sec: 0, Process_Working_Set_ Private: 1629888512, Process_Working_Set_Peak: 5531205632, Process_IO_Write Operations_sec: 0.400004964, Process_Page_File Bytes: 2720718848, Process_pct_ User_Time: 44.53143347, Process_Virtual_Bytes Peak: 1.52E+14, Process_Page_File Bytes Peak: 3771826176, Process_IO_Other_Bytes_sec: 2982.437012, Process_Private_Bytes: 2720718848, Process_IO_Write_Bytes_sec: 49.40061306, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.52E+14, Process_pct_ Processor_Time: 200.000824, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2290400, Process_Working Set: 2185793536, Process_Page Faults_sec: 558.6069323, Process_ID Process: 0, Process_IO Other Operations_sec: 46.00057087, Process_IO Data Operations_sec: 0.400004964, Process_Thread Count: 949, Process_pct_ Privileged_Time: 155.4693905, Process_IO Data Bytes_sec: 49.40061306, Process_IO Read Bytes_sec: 0, Process_Priority Base: 0, Process_Handle Count: 38338, Network_I(Intel R _82574L_GNC)TCP_APS: 5299, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4830.859951, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 243.0030157, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5073.862967, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 4.500055846, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 7.90009804, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 12.40015389, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 2, Network_I(Intel R _82574L_GNC) Packets Sent sec: 4.500055846, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 7.90009804, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 106704896, Memory Free & Zero Page List Bytes: 20393984, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 444575744, Memory Commit Limit: 8473149440, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 687.108527, Memory Available KBytes: 434156, Memory Pages sec: 0, Memory Cache Bytes: 14819328, Memory Pool Nonpaged Bytes: 89014272, Memory Page Faults sec: 558.6069323, Memory Transition Faults sec: 1.600019856, Memory System Cache Resident Bytes: 14819328, Memory Long-Term Average Standby Cache Lifetime (s): 20, Memory Standby Cache Reserve Bytes: 115433472, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 161972224, Memory System Driver Resident Bytes: 4169728, Memory Standby Cache Normal Priority Bytes: 146776064, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 41.98879456, Memory Free System Page Table Entries: 4294967295, Memory Available MBytes: 423, Memory Modified Page List Bytes: 6815744, Memory Cache Faults sec: 0, Memory Committed Bytes: 3557773312, Memory System Driver Total Bytes: 18202624, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 70037504, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 9216, LogicalDisk(_Total) pct_ Idle Time: 99.98997496, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 81.31416035, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 0.400004964, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 166420, LogicalDisk(_Total) Avg  Disk sec Write: 0.000688625, LogicalDisk(_Total) Disk Bytes sec: 3686.445749, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.009181038, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000275451, LogicalDisk(_Total) Avg  Disk Queue Length: 0.000275451, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 3686.445749, LogicalDisk(_Total) Disk Transfers sec: 0.400004964, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 9216, LogicalDisk(_Total) pct_ Disk Write Time: 0.009182038, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000688625

[Assistant] normal


[User] date: 25-Apr-19, time:  19:50:58 , latitude: 165.3083794, longitude: 179.3226817

[Assistant] attack


[User] PID: 3675, MINFLT: 2075, MAJFLT: 0, VSTEXT: 148, VSIZE: 17948, RSIZE: 2604, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] PID: 3257, TRUN: 0, TSLPI: 22, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0.12, CMD: Web-Content

[Assistant] normal


[User] src_ip: 192.168.1.195, src_port: 49934, dst_ip: 192.168.1.152, dst_port: 1880, proto: tcp, service: -, duration: 0.417572, src_bytes: 3111, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 16, src_ip_bytes: 3763, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: data_before_established, weird_addl: -, weird_notice: F

[Assistant] normal


[User] PID: 1244, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] PID: 2797, TRUN: 0, TSLPI: 5, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: nautilus

[Assistant] normal


[User] Processor(_Total) DPC Rate: 57, Processor(_Total) pct_ Idle Time: 81.97916667, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 0.625, Processor(_Total) pct_ C1 Time: 80, Processor(_Total) pct_ Processor Time: 18.02083333, Processor(_Total) C1 Transitions sec: 2770.825029, Processor(_Total) pct_ DPC Time: 0.729166667, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 17.39583333, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 2431.805652, Processor(_Total) Interrupts sec: 3530.935138, Process(_Total) Pool Paged Bytes: 8304520, Process(_Total) IO Read Operations sec: 2.133455267, Process(_Total) Working Set - Private: 802078720, Process(_Total) Working Set Peak: 2026237952, Process(_Total) IO Write Operations sec: 1.533420973, Process(_Total) Page File Bytes: 2045378560, Process(_Total) pct_ User Time: 0.625, Process(_Total) Virtual Bytes Peak: 8282898432, Process(_Total) Page File Bytes Peak: 2663342080, Process(_Total) IO Other Bytes sec: 4575.861526, Process(_Total) Private Bytes: 2045378560, Process(_Total) IO Write Bytes sec: 789.0450966, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6986838016, Process(_Total) pct_ Processor Time: 99.27083333, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1203376, Process(_Total) Working Set: 855203840, Process(_Total) Page Faults sec: 3520.334532, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 235.0134318, Process(_Total) IO Data Operations sec: 3.666876241, Process(_Total) Thread Count: 573, Process(_Total) pct_ Privileged Time: 98.64583333, Process(_Total) IO Data Bytes sec: 1028.52545, Process(_Total) IO Read Bytes sec: 239.4803538, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 14207, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 122.8070188, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 101.0057728, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 223.8127916, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 1.533420973, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 1.666761928, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 3.200182901, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 1.533420973, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 1.666761928, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 92917760, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 753664, Memory Available Bytes: 6365184, Memory Commit Limit: 2918703104, Memory Transition Pages RePurposed sec: 4051.231541, Memory Pages Output sec: 1653.227821, Memory Page Reads sec: 2338.200303, Memory Demand Zero Faults sec: 114.6065501, Memory Available KBytes: 6216, Memory Pages sec: 6171.219372, Memory Cache Bytes: 454656, Memory Pool Nonpaged Bytes: 52846592, Memory Page Faults sec: 3647.541803, Memory Transition Faults sec: 1197.53511, Memory System Cache Resident Bytes: 454656, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 98.07227182, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 241664, Memory System Driver Resident Bytes: 1425408, Memory Standby Cache Normal Priority Bytes: 6123520, Memory Pool Paged Allocs: 58926, Memory Pool Nonpaged Allocs: 52360, Memory pct_ Committed Bytes In Use: 82.17742999, Memory Free System Page Table Entries: 33562140, Memory Available MBytes: 6, Memory Modified Page List Bytes: 57344, Memory Cache Faults sec: 0.400022863, Memory Committed Bytes: 2398515200, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 4517.991552, Memory Pool Paged Resident Bytes: 11378688, Memory Write Copies sec: 0.133340954

[Assistant] normal


[User] src_ip: 192.168.1.33, src_port: 35795, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: RSTRH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:11, temperature: 36.30536005, pressure: 1.361414016, humidity: 87.27887984

[Assistant] normal


[User] date: 28-Apr-19, time:  12:12:53 , FC1_Read_Input_Register: 34623, FC2_Read_Discrete_Value: 39384, FC3_Read_Holding_Register: 29667, FC4_Read_Coil: 37409

[Assistant] attack


[User] PID: 4029, RDDSK: 0, WRDSK: 4, WCANCL: 0, DSK: 0.05, CMD: apache2, attack: 1

[Assistant] attack


[User] date: 31-Mar-19, time: 12:42:24, FC1_Read_Input_Register: 25892, FC2_Read_Discrete_Value: 31910, FC3_Read_Holding_Register: 28888, FC4_Read_Coil: 62246

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 44611, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.00002, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 86, dst_ip: 192.168.1.195, dst_port: 86, proto: tcp, service: -, duration: 0.539521, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 100, src_ip_bytes: 4000, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 55630, dst_ip: 192.168.1.190, dst_port: 21, proto: tcp, service: ftp, duration: 10.912972, src_bytes: 91, dst_bytes: 188, conn_state: RSTR, missed_bytes: 0, src_pkts: 17, src_ip_bytes: 983, dst_pkts: 16, dst_ip_bytes: 1016, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 26-Apr-19, time:  16:59:34 , motion_status: 0, light_status:  off

[Assistant] attack


[User] Processor(_Total) DPC Rate: 62, Processor(_Total) pct_ Idle Time: 73.12023938, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 1.354078507, Processor(_Total) pct_ C1 Time: 73.32855916, Processor(_Total) pct_ Processor Time: 26.87976062, Processor(_Total) C1 Transitions sec: 3356.66238, Processor(_Total) pct_ DPC Time: 0.312479655, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 25.51917187, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 3157.40784, Processor(_Total) Interrupts sec: 4357.801451, Process(_Total) Pool Paged Bytes: 7814856, Process(_Total) IO Read Operations sec: 0.733288705, Process(_Total) Working Set - Private: 782872576, Process(_Total) Working Set Peak: 2058907648, Process(_Total) IO Write Operations sec: 0.933276534, Process(_Total) Page File Bytes: 2116808704, Process(_Total) pct_ User Time: 1.354078507, Process(_Total) Virtual Bytes Peak: 8072384512, Process(_Total) Page File Bytes Peak: 2750611456, Process(_Total) IO Other Bytes sec: 3541.251146, Process(_Total) Private Bytes: 2116808704, Process(_Total) IO Write Bytes sec: 5640.456722, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6774067200, Process(_Total) pct_ Processor Time: 99.6810101, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1050936, Process(_Total) Working Set: 834392064, Process(_Total) Page Faults sec: 4199.744404, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 126.525633, Process(_Total) IO Data Operations sec: 1.66656524, Process(_Total) Thread Count: 547, Process(_Total) pct_ Privileged Time: 98.32693159, Process(_Total) IO Data Bytes sec: 5742.983815, Process(_Total) IO Read Bytes sec: 102.5270935, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13799, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 95.46085692, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 86.06142897, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 181.5222859, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 1.266589582, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 1.266589582, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 2.533179164, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 1.266589582, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 1.266589582, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 93192192, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 1478656, Memory Available Bytes: 2879488, Memory Commit Limit: 2918703104, Memory Transition Pages RePurposed sec: 4102.750307, Memory Pages Output sec: 3012.150014, Memory Page Reads sec: 2517.180138, Memory Demand Zero Faults sec: 389.1096521, Memory Available KBytes: 2812, Memory Pages sec: 7715.997071, Memory Cache Bytes: 344064, Memory Pool Nonpaged Bytes: 79360000, Memory Page Faults sec: 4318.070536, Memory Transition Faults sec: 1412.980673, Memory System Cache Resident Bytes: 344064, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 668.3593237, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 483328, Memory System Driver Resident Bytes: 1433600, Memory Standby Cache Normal Priority Bytes: 2396160, Memory Pool Paged Allocs: 59369, Memory Pool Nonpaged Allocs: 58129, Memory pct_ Committed Bytes In Use: 85.20406302, Memory Free System Page Table Entries: 33562140, Memory Available MBytes: 2, Memory Modified Page List Bytes: 61440, Memory Cache Faults sec: 0.599963486, Memory Committed Bytes: 2486853632, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 4703.847057, Memory Pool Paged Resident Bytes: 11014144, Memory Write Copies sec: 0

[Assistant] normal


[User] Processor(_Total) DPC Rate: 0, Processor(_Total) pct_ Idle Time: 98.4375, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 1.041666667, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 0.104166667, Processor(_Total) pct_ C1 Time: 93.33333333, Processor(_Total) pct_ Processor Time: 1.5625, Processor(_Total) C1 Transitions sec: 100.6815293, Processor(_Total) pct_ DPC Time: 0.3125, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 1.458333333, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 169.491687, Processor(_Total) Interrupts sec: 128.0855747, Process(_Total) Pool Paged Bytes: 6706312, Process(_Total) IO Read Operations sec: 18.66942265, Process(_Total) Working Set - Private: 305225728, Process(_Total) Working Set Peak: 1152638976, Process(_Total) IO Write Operations sec: 1.20017717, Process(_Total) Page File Bytes: 666705920, Process(_Total) pct_ User Time: 0, Process(_Total) Virtual Bytes Peak: 5512671232, Process(_Total) Page File Bytes Peak: 916353024, Process(_Total) IO Other Bytes sec: 1308.993234, Process(_Total) Private Bytes: 666705920, Process(_Total) IO Write Bytes sec: 5899.804262, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 4741140480, Process(_Total) pct_ Processor Time: 98.54166667, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 952912, Process(_Total) Working Set: 604540928, Process(_Total) Page Faults sec:  , Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 45.74008548, Process(_Total) IO Data Operations sec: 19.86959982, Process(_Total) Thread Count: 545, Process(_Total) pct_ Privileged Time: 98.54166667, Process(_Total) IO Data Bytes sec: 5072.415457, Process(_Total) IO Read Bytes sec:  , Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13941, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 162.157271, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 80.67857644, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 242.8358474, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 1.20017717, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 1.20017717, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 2.40035434, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 1.20017717, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 1.20017717, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 104366080, Memory Free & Zero Page List Bytes: 1048576, Memory Cache Bytes Peak: 80883712, Memory System Code Resident Bytes: 1662976, Memory Available Bytes: 368418816, Memory Commit Limit: 2146951168, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0.133353019, Memory Demand Zero Faults sec: 14.13542, Memory Available KBytes: 359784, Memory Pages sec: 1.26685368, Memory Cache Bytes: 18903040, Memory Pool Nonpaged Bytes: 55721984, Memory Page Faults sec: 22.26995416, Memory Transition Faults sec: 8.601269719, Memory System Cache Resident Bytes: 18903040, Memory Standby Cache Reserve Bytes: 194228224, Memory Page Writes sec: 0, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 68907008, Memory System Driver Resident Bytes: 4071424, Memory Standby Cache Normal Priority Bytes: 104235008, Memory Pool Paged Allocs: 78838, Memory Pool Nonpaged Allocs: 61525, Memory pct_ Committed Bytes In Use: 47.80009081, Memory Free System Page Table Entries: 33558108, Memory Available MBytes: 351, Memory Modified Page List Bytes: 21368832, Memory Cache Faults sec: 0.133353019, Memory Committed Bytes: 1026244608, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 1.26685368, Memory Pool Paged Resident Bytes: 53227520, Memory Write Copies sec: 0.066676509

[Assistant] normal


[User] PID: 2420, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: dbus-daemon

[Assistant] normal


[User] date: 28-Apr-19, time:  04:53:29 , motion_status: 1, light_status:  on

[Assistant] attack


[User] date: 1-Apr-19, time:  19:56:40 , current_temperature: 32.53339459, thermostat_status: 1

[Assistant] normal


[User] date: 1-Apr-19, time:  19:56:15 , current_temperature: 31.67662814, thermostat_status: 0

[Assistant] normal


[User] date: 25-Apr-19, time:  09:47:44 , FC1_Read_Input_Register: 30361, FC2_Read_Discrete_Value: 23484, FC3_Read_Holding_Register: 43909, FC4_Read_Coil: 58207

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 36406, dst_ip: 192.168.1.152, dst_port: 80, proto: tcp, service: -, duration: 0.01481, src_bytes: 0, dst_bytes: 1421, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 1, dst_ip_bytes: 1473, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2533, MINFLT: 0, MAJFLT: 0, VSTEXT: 589, VSIZE: 634.2, RSIZE: 17016, VGROW: 0, RGROW: 0, MEM: 0, CMD: hud-service

[Assistant] normal


[User] PID: 3752, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: tcpdump

[Assistant] normal


[User] PID: 1195, MINFLT: 132, MAJFLT: 265.2, VSTEXT: 8068, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: gdm3

[Assistant] attack


[User] src_ip: 2405:6e00:10ce:2c00:20c:29ff:feee:e07a, src_port: 35295, dst_ip: 2001:503:231d::2:30, dst_port: 53, proto: udp, service: dns, duration: 0.508374, src_bytes: 39, dst_bytes: 760, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 87, dst_pkts: 1, dst_ip_bytes: 808, dns_query: msecnd.net, dns_qclass: 1, dns_qtype: 43, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 1-Apr-19, time:  20:17:56 , current_temperature: 26.78527069, thermostat_status: 1

[Assistant] normal


[User] date: 23-Apr-19, time:  21:31:23 , temperature: 32.6977677, pressure: -3.175513838, humidity: 9.093471178

[Assistant] attack


[User] date: 25-Apr-19, time:  18:45:11 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] date: 31-Mar-19, time:    12:41:31   , fridge_temperature: 12.5, temp_condition: high

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49223, dst_ip: 192.168.1.33, dst_port: 4444, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 216, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49633, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.000016, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time:    12:38:55   , fridge_temperature: 5.55, temp_condition: low

[Assistant] normal


[User] date: 2-Apr-19, time:  04:06:31 , current_temperature: 26.44242586, thermostat_status: 1

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 49, dst_ip: 192.168.1.193, dst_port: 49, proto: tcp, service: -, duration: 0.000658, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 23, dst_ip: 192.168.1.193, dst_port: 23, proto: tcp, service: -, duration: 0.000017, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 27-Apr-19, time:  05:30:57 , current_temperature: 26.68694189, thermostat_status: 1

[Assistant] attack


[User] PID: 3081, TRUN: 1, TSLPI: 2, TSLPU: 0, POLI: norm, NICE: 10, PRI: 130, RTPR: 0, CPUNR: 2, Status: 0, EXC: 0, State: R, CPU: 2.52, CMD: update-manager

[Assistant] attack


[User] PID: 2547, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: unity-panel-se

[Assistant] normal


[User] PID: 3677, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 78.85391813, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.704223822, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 4.460084203, Processor_pct_ C1_Time: 78.85391813, Processor_pct_ Processor_Time: 15.33664723, Processor_C1_ransitions_sec: 282.4163369, Processor_pct_ DPC_Time: 0.469482548, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 10.87634569, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 116.6545835, Processor_Interrupts_sec: 832.2162037, Process_Pool_Paged Bytes: 32979976, Process_IO Read_Operations_sec: 77.16841002, Process_Working_Set_ Private: 588197888, Process_Working_Set_Peak: 4786507776, Process_IO_Write Operations_sec: 71.25550588, Process_Page_File Bytes: 2081361920, Process_pct_ User_Time: 8.920168406, Process_Virtual_Bytes Peak: 2.60E+14, Process_Page_File Bytes Peak: 2944901120, Process_IO_Other_Bytes_sec: 35381.81621, Process_Private_Bytes: 2081361920, Process_IO_Write_Bytes_sec: 13529.02534, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 2.60E+14, Process_pct_ Processor_Time: 197.6521526, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 3272448, Process_Working Set: 2116866048, Process_Page Faults_sec: 1615.425456, Process_ID Process: 0, Process_IO Other Operations_sec: 1165.643866, Process_IO Data Operations_sec: 148.4239159, Process_Thread Count: 1592, Process_pct_ Privileged_Time: 188.7319842, Process_IO Data Bytes_sec: 23591.98644, Process_IO Read Bytes_sec: 10062.9611, Process_Priority Base: 0, Process_Handle Count: 56773, Network_I(Intel R _82574L_GNC)TCP_APS: 11201, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4814.20638, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 12904.66275, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 17718.86913, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 35.07655001, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 39.68661087, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 74.76316088, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 5, Network_I(Intel R _82574L_GNC) Packets Sent sec: 35.07655001, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 39.68661087, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 207917056, Memory Free & Zero Page List Bytes: 306544640, Memory Cache Bytes Peak: 279379968, Memory System Code Resident Bytes: 0, Memory Available Bytes: 1490694144, Memory Commit Limit: 5770170368, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0.601312286, Memory Demand Zero Faults sec: 417.5111638, Memory Available KBytes: 1455756, Memory Pages sec: 0.601312286, Memory Cache Bytes: 73097216, Memory Pool Nonpaged Bytes: 110817280, Memory Page Faults sec: 1660.423659, Memory Transition Faults sec: 1272.076141, Memory System Cache Resident Bytes: 73097216, Memory Long-Term Average Standby Cache Lifetime (s): 14400, Memory Standby Cache Reserve Bytes: 647835648, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 223485952, Memory System Driver Resident Bytes: 1.76E+13, Memory Standby Cache Normal Priority Bytes: 312827904, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 65.80452078, Memory Free System Page Table Entries: 12261022, Memory Available MBytes: 1421, Memory Modified Page List Bytes: 12075008, Memory Cache Faults sec: 39.78682958, Memory Committed Bytes: 3797032960, Memory System Driver Total Bytes: 29220864, Memory Pages Input sec: 0.601312286, Memory Pool Paged Resident Bytes: 146853888, Memory Write Copies sec: 3.006561429, LogicalDisk(_Total) Avg  Disk Bytes Write: 13277.53846, LogicalDisk(_Total) pct_ Idle Time: 99.821832, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 81.81938113, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 10.42274629, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 167454, LogicalDisk(_Total) Avg  Disk sec Write: 0.000334253, LogicalDisk(_Total) Disk Bytes sec: 138388.4147, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.116056086, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.003481663, LogicalDisk(_Total) Avg  Disk Queue Length: 0.003481663, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 138388.4147, LogicalDisk(_Total) Disk Transfers sec: 10.42274629, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 13277.53846, LogicalDisk(_Total) pct_ Disk Write Time: 0.116055084, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000334253

[Assistant] attack


[User] PID: 4032, MINFLT: 0, MAJFLT: 0, VSTEXT: 0, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: worer/u256:0

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:25, latitude: 0.726464636, longitude: 10.54115208

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49623, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.000137, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3029, TRUN: 1, TSLPI: 0, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 4, Status: -, EXC: 0, State: R, CPU: 0.01, CMD: atop

[Assistant] attack


[User] PID: 6221, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: N, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] PID: 2618, MINFLT: 0, MAJFLT: 0, VSTEXT: 66, VSIZE: 625.7, RSIZE: 18312, VGROW: 0, RGROW: 0, MEM: 0, CMD: unity-panel-se

[Assistant] attack


[User] src_ip: 192.168.1.37, src_port: 38475, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 60, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 26-Apr-19, time:  14:09:23 , latitude: 15.54987827, longitude: 25.7255029

[Assistant] attack


[User] PID: 1878, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vmtoolsd, attack: 0

[Assistant] normal


[User] Processor(_Total) DPC Rate: 16, Processor(_Total) pct_ Idle Time: 75.20833333, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.104166667, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 1.041666667, Processor(_Total) pct_ C1 Time: 73.33333333, Processor(_Total) pct_ Processor Time: 24.79166667, Processor(_Total) C1 Transitions sec: 3121.152434, Processor(_Total) pct_ DPC Time: 0.9375, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 23.75, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 2959.95489, Processor(_Total) Interrupts sec: 4179.60297, Process(_Total) Pool Paged Bytes: 7902144, Process(_Total) IO Read Operations sec: 2.133300822, Process(_Total) Working Set - Private: 784142336, Process(_Total) Working Set Peak: 2024312832, Process(_Total) IO Write Operations sec: 1.533309966, Process(_Total) Page File Bytes: 2051809280, Process(_Total) pct_ User Time: 1.041666667, Process(_Total) Virtual Bytes Peak: 8086155264, Process(_Total) Page File Bytes Peak: 2710196224, Process(_Total) IO Other Bytes sec: 1911.570868, Process(_Total) Private Bytes: 2051809280, Process(_Total) IO Write Bytes sec: 789.2546384, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6798344192, Process(_Total) pct_ Processor Time: 98.95833333, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1058776, Process(_Total) Working Set: 836763648, Process(_Total) Page Faults sec: 4309.534323, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 94.19856441, Process(_Total) IO Data Operations sec: 3.666610788, Process(_Total) Thread Count: 560, Process(_Total) pct_ Privileged Time: 97.91666667, Process(_Total) IO Data Bytes sec: 1028.717656, Process(_Total) IO Read Bytes sec: 239.4630173, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13758, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 14.53311185, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 53.33252055, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 67.86563239, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 1.199981712, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 0.199996952, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 1.399978664, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 1.199981712, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 0.199996952, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 92676096, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 724992, Memory Available Bytes: 2891776, Memory Commit Limit: 2918703104, Memory Transition Pages RePurposed sec: 5326.11883, Memory Pages Output sec: 3784.208995, Memory Page Reads sec: 2401.296738, Memory Demand Zero Faults sec: 317.1951659, Memory Available KBytes: 2824, Memory Pages sec: 10236.77732, Memory Cache Bytes: 548864, Memory Pool Nonpaged Bytes: 77254656, Memory Page Faults sec: 4419.93264, Memory Transition Faults sec: 1700.374086, Memory System Cache Resident Bytes: 548864, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 579.9911609, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 20480, Memory System Driver Resident Bytes: 1486848, Memory Standby Cache Normal Priority Bytes: 2871296, Memory Pool Paged Allocs: 59285, Memory Pool Nonpaged Allocs: 57520, Memory pct_ Committed Bytes In Use: 82.93777208, Memory Free System Page Table Entries: 33562140, Memory Available MBytes: 2, Memory Modified Page List Bytes: 61440, Memory Cache Faults sec: 4.733261198, Memory Committed Bytes: 2420707328, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 6452.56833, Memory Pool Paged Resident Bytes: 11571200, Memory Write Copies sec: 0

[Assistant] normal


[User] PID: 2129, TRUN: 0, TSLPI: 0, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 5, Status: -, EXC: 0, State: I, CPU: 0, CMD: kworker/5:5-mm

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49866, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.000164, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] Processor(_Total) DPC Rate: 65, Processor(_Total) pct_ Idle Time: 31.25, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 1.145833333, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 41.66666667, Processor(_Total) pct_ C1 Time: 26.66666667, Processor(_Total) pct_ Processor Time: 68.75, Processor(_Total) C1 Transitions sec: 1302.331041, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 27.08333333, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 1611.930496, Processor(_Total) Interrupts sec: 2959.528125, Process(_Total) Pool Paged Bytes: 7385904, Process(_Total) IO Read Operations sec: 182.3330124, Process(_Total) Working Set - Private: 717897728, Process(_Total) Working Set Peak: 1965498368, Process(_Total) IO Write Operations sec: 175.733024, Process(_Total) Page File Bytes: 2104868864, Process(_Total) pct_ User Time: 41.66666667, Process(_Total) Virtual Bytes Peak: 7486050304, Process(_Total) Page File Bytes Peak: 2411311104, Process(_Total) IO Other Bytes sec: 13859.57561, Process(_Total) Private Bytes: 2104868864, Process(_Total) IO Write Bytes sec: 150161.869, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6494732288, Process(_Total) pct_ Processor Time: 98.85416667, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1029680, Process(_Total) Working Set: 817848320, Process(_Total) Page Faults sec: 3981.592992, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 627.9988947, Process(_Total) IO Data Operations sec: 358.0660365, Process(_Total) Thread Count: 531, Process(_Total) pct_ Privileged Time: 57.1875, Process(_Total) IO Data Bytes sec: 308557.9236, Process(_Total) IO Read Bytes sec: 158396.0546, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13064, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 2763.12847, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 209.6662977, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 2972.794768, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 3.533327115, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 4.466658805, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 7.99998592, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 3.533327115, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 4.466658805, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 91783168, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 888832, Memory Available Bytes: 43778048, Memory Commit Limit: 2700599296, Memory Transition Pages RePurposed sec: 4131.259396, Memory Pages Output sec: 1077.398104, Memory Page Reads sec: 1634.863789, Memory Demand Zero Faults sec: 949.0649963, Memory Available KBytes: 42752, Memory Pages sec: 5011.924512, Memory Cache Bytes: 929792, Memory Pool Nonpaged Bytes: 52633600, Memory Page Faults sec: 4182.192639, Memory Transition Faults sec: 1594.597194, Memory System Cache Resident Bytes: 929792, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 80.79985779, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 13602816, Memory System Driver Resident Bytes: 1499136, Memory Standby Cache Normal Priority Bytes: 30175232, Memory Pool Paged Allocs: 59299, Memory Pool Nonpaged Allocs: 51041, Memory pct_ Committed Bytes In Use: 91.15718173, Memory Free System Page Table Entries: 33559392, Memory Available MBytes: 41, Memory Modified Page List Bytes: 2752512, Memory Cache Faults sec: 8.066652469, Memory Committed Bytes: 2461790208, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 3934.526409, Memory Pool Paged Resident Bytes: 16101376, Memory Write Copies sec: 0

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:36, FC1_Read_Input_Register: 5804, FC2_Read_Discrete_Value: 36259, FC3_Read_Holding_Register: 58289, FC4_Read_Coil: 53125

[Assistant] normal


[User] date: 31-Mar-19, time: 12:40:41, temperature: 47.49711398, pressure: 1.072269609, humidity: 71.16623831

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 20, dst_ip: 192.168.1.190, dst_port: 20, proto: tcp, service: -, duration: 0.000017, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2882, MINFLT: 0, MAJFLT: 0, VSTEXT: 36, VSIZE: 381.1, RSIZE: 16928, VGROW: 0, RGROW: 0, MEM: 0, CMD: vmtoolsd

[Assistant] attack


[User] PID: 1247, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: mysqld, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.37, src_port: 35237, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 1, dst_ip_bytes: 52, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.194, src_port: 80, dst_ip: 192.168.1.194, dst_port: 1584, proto: tcp, service: -, duration: 0.226971, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:37, latitude: 3.750626965, longitude: 14.15017393

[Assistant] normal


[User] PID: 14799, MINFLT: 1933, MAJFLT: 0, VSTEXT: 148, VSIZE: 17924, RSIZE: 2408, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 44, dst_ip: 192.168.1.152, dst_port: 44, proto: tcp, service: -, duration: 0.000228, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3885, MINFLT: 0, MAJFLT: 0, VSTEXT: 596, VSIZE: 184.4, RSIZE: 6284, VGROW: 0, RGROW: 0, MEM: 0, CMD: apache2

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 32922, dst_ip: 216.58.199.34, dst_port: 443, proto: tcp, service: ssl, duration: 0.165523, src_bytes: 509, dst_bytes: 2925, conn_state: SF, missed_bytes: 0, src_pkts: 11, src_ip_bytes: 1101, dst_pkts: 11, dst_ip_bytes: 3543, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2753, MINFLT: 0, MAJFLT: 0, VSTEXT: 6, VSIZE: 200.3, RSIZE: 1268, VGROW: 0, RGROW: 320, MEM: 0, CMD: ibus-engine-si

[Assistant] normal


[User] date: 31-Mar-19, time: 12:42:28, temperature: 34.78754311, pressure: 1.035, humidity: 70.21869405

[Assistant] normal


[User] PID: 2809, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: vmtoolsd

[Assistant] normal


[User] PID: 1583, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vmtoolsd, attack: 1

[Assistant] attack


[User] PID: 1408, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: acpid

[Assistant] normal


[User] date: 1-Apr-19, time:  20:58:18 , motion_status: 0, light_status:  off

[Assistant] normal


[User] date: 31-Mar-19, time: 12:42:01, motion_status: 0, light_status:  off

[Assistant] normal


[User] src_ip: 192.168.1.37, src_port: 35927, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: RSTRH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 38136, dst_ip: 192.168.1.49, dst_port: 8007, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3793, MINFLT: 0, MAJFLT: 0, VSTEXT: 978, VSIZE: 2.9, RSIZE: 10108, VGROW: 0, RGROW: 0, MEM: 0, CMD: drone

[Assistant] normal


[User] date: 1-Apr-19, time:  20:51:32 , motion_status: 0, light_status:  off

[Assistant] normal


[User] date: 28-Apr-19, time: 5:14:26, temperature: 28.60864184, pressure: 0.030678349, humidity: 25.50080114

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49367, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.000144, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2489, MINFLT: 0, MAJFLT: 0, VSTEXT: 78, VSIZE: 122, RSIZE: 3304, VGROW: 0, RGROW: 16, MEM: 0, CMD: at-spi2-regist

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 50568, dst_ip: 192.168.1.186, dst_port: 5101, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time: 4:32:45, temperature: 47.32512839, pressure: 1.537812654, humidity: 32.82043667

[Assistant] attack


[User] PID: 1501, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: accounts-daemo, attack: 0

[Assistant] normal


[User] date: 1-Apr-19, time:  19:12:47 , current_temperature: 27.26344162, thermostat_status: 1

[Assistant] normal


[User] PID: 2707, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: indicator-keyb

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 34296, dst_ip: 192.168.1.152, dst_port: 10502, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 34128, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.008624, src_bytes: 84, dst_bytes: 1308, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 140, dst_pkts: 6, dst_ip_bytes: 1476, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49877, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.000105, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.37, src_port: 39659, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 25-Apr-19, time:  08:56:15 , fridge_temperature: 10.95, temp_condition: high

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 41183, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000017, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 28-Apr-19, time:  04:48:48 , fridge_temperature: 8.65, temp_condition: high

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 58528, dst_ip: 52.114.74.45, dst_port: 443, proto: tcp, service: ssl, duration: 1.35764, src_bytes: 269, dst_bytes: 3750, conn_state: RSTR, missed_bytes: 0, src_pkts: 9, src_ip_bytes: 745, dst_pkts: 6, dst_ip_bytes: 4058, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:    04:04:57   , door_state: open, sphone_signal: true

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 44, dst_ip: 192.168.1.152, dst_port: 44, proto: tcp, service: -, duration: 0.000198, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.37, src_port: 37713, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 1500, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2499, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: 0, EXC: 0, State: S, CPU: 0.01, CMD: dbus-daemon

[Assistant] attack


[User] PID: 1473, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: irqbalance, attack: 1

[Assistant] attack


[User] PID: 4264, MINFLT: 433, MAJFLT: 0, VSTEXT: 0, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: <startpar-ups>

[Assistant] normal


[User] date: 31-Mar-19, time:    12:40:04   , fridge_temperature: 6.35, temp_condition: high

[Assistant] normal


[User] PID: 4375, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: atop

[Assistant] normal


[User] PID: 6869, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: 0, EXC: 0, State: S, CPU: 0.01, CMD: apache2

[Assistant] attack


[User] date: 2-Apr-19, time:  04:06:47 , motion_status: 0, light_status:  off

[Assistant] normal


[User] date: 25-Apr-19, time:  15:32:57 , fridge_temperature: 11.85, temp_condition: high

[Assistant] attack