[User] src_ip: 192.168.1.193, src_port: 49737, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000476, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3793, MINFLT: 0, MAJFLT: 0, VSTEXT: 978, VSIZE: 2.9, RSIZE: 10108, VGROW: 0, RGROW: 0, MEM: 0, CMD: drone

[Assistant] normal


[User] src_ip: 192.168.1.180, src_port: 59329, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.0015, src_bytes: 31, dst_bytes: 106, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 59, dst_pkts: 1, dst_ip_bytes: 134, dns_query: elasticsearch, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 35878, dst_ip: 52.59.177.21, dst_port: 80, proto: tcp, service: http, duration: 0.959757, src_bytes: 231, dst_bytes: 12183, conn_state: SF, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 551, dst_pkts: 12, dst_ip_bytes: 12815, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:20, motion_status: 1, light_status:  on

[Assistant] normal


[User] date: 31-Mar-19, time: 12:42:01, motion_status: 1, light_status:  on

[Assistant] normal


[User] src_ip: 192.168.1.194, src_port: 80, dst_ip: 192.168.1.194, dst_port: 1948, proto: tcp, service: -, duration: 0.253686, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 1-Apr-19, time:  19:58:38 , motion_status: 0, light_status:  off

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 41614, dst_ip: 52.59.177.21, dst_port: 80, proto: tcp, service: http, duration: 1.123573, src_bytes: 283, dst_bytes: 12183, conn_state: SF, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 603, dst_pkts: 12, dst_ip_bytes: 12815, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time: 16:21:12, motion_status: 0, light_status:  off

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:18, FC1_Read_Input_Register: 36058, FC2_Read_Discrete_Value: 58595, FC3_Read_Holding_Register: 1439, FC4_Read_Coil: 1144

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 45710, dst_ip: 172.217.25.161, dst_port: 443, proto: tcp, service: ssl, duration: 0.7789, src_bytes: 535, dst_bytes: 3108, conn_state: SF, missed_bytes: 0, src_pkts: 14, src_ip_bytes: 1271, dst_pkts: 11, dst_ip_bytes: 3688, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.184, src_port: 8080, dst_ip: 192.168.1.184, dst_port: 1857, proto: tcp, service: -, duration: 0.281481, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 3103, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: 0, EXC: 0, State: S, CPU: 0.01, CMD: ostinato

[Assistant] attack


[User] PID: 4375, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 61178, dst_ip: 192.168.1.49, dst_port: 65389, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.33, src_port: 44111, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 46132, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.01607, src_bytes: 74, dst_bytes: 118, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 130, dst_pkts: 2, dst_ip_bytes: 174, dns_query: accounts.google.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 5864, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 5, Status: N, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] PID: 2938, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: nautilus, attack: 0

[Assistant] normal


[User] date: 28-Apr-19, time:  17:02:16 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 80, dst_ip: 192.168.1.193, dst_port: 1256, proto: tcp, service: -, duration: 0.220914, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 34240, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.006115, src_bytes: 54, dst_bytes: 54, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 82, dst_pkts: 1, dst_ip_bytes: 82, dns_query: testphp.vulnweb.com/listproducts.php, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: T, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:42:07, temperature: 47.05814916, pressure: 1.035, humidity: 66.82243822

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:44, FC1_Read_Input_Register: 50938, FC2_Read_Discrete_Value: 2654, FC3_Read_Holding_Register: 8975, FC4_Read_Coil: 38181

[Assistant] normal


[User] date: 31-Mar-19, time:    12:39:37   , fridge_temperature: 1, temp_condition: low

[Assistant] normal


[User] PID: 3675, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] date: 25-Apr-19, time:  16:39:28 , motion_status: 0, light_status:  off

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 57872, dst_ip: 192.168.1.194, dst_port: 80, proto: tcp, service: -, duration: 16.645256, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 2, dst_ip_bytes: 120, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:22, FC1_Read_Input_Register: 49229, FC2_Read_Discrete_Value: 63493, FC3_Read_Holding_Register: 25911, FC4_Read_Coil: 25614

[Assistant] normal


[User] date: 28-Apr-19, time: 15:06:47, motion_status: 1, light_status:  on

[Assistant] attack


[User] PID: 2823, TRUN: 0, TSLPI: 11, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0.02, CMD: node-red

[Assistant] attack


[User] date: 31-Mar-19, time:    12:42:27   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] PID: 3895, RDDSK: 0, WRDSK: 32, WCANCL: 0, DSK: 0.16, CMD: atop, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 35974, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 0.01544, src_bytes: 152, dst_bytes: 518, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 372, dst_pkts: 4, dst_ip_bytes: 690, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3002, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: 0, EXC: 0, State: S, CPU: 0.01, CMD: zeitgeist-fts

[Assistant] attack


[User] date: 31-Mar-19, time:    12:42:10   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 66, dst_ip: 192.168.1.152, dst_port: 66, proto: tcp, service: -, duration: 0.004128, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2600, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: hud-service, attack: 0

[Assistant] normal


[User] PID: 3119, MINFLT: 0, MAJFLT: 0, VSTEXT: 3063, VSIZE: 725.9, RSIZE: 116.8, VGROW: 0, RGROW: 0, MEM: 0.03, CMD: update-manager

[Assistant] normal


[User] date: 28-Apr-19, time:  04:15:02 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] PID: 2327, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: init

[Assistant] normal


[User] PID: 2121, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] date: 31-Mar-19, time:    12:40:31   , fridge_temperature: 7.8, temp_condition: high

[Assistant] normal


[User] src_ip: 172.17.0.7, src_port: 56129, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 1400, MINFLT: 1, MAJFLT: 0, VSTEXT: 37, VSIZE: 23652, RSIZE: 1028, VGROW: 0, RGROW: 0, MEM: 0, CMD: cron

[Assistant] attack


[User] PID: 2118, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 0

[Assistant] normal


[User] date: 27-Apr-19, time:  05:30:07 , fridge_temperature: 3, temp_condition: low

[Assistant] attack


[User] PID: 3132, TRUN: 0, TSLPI: 22, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 4, Status: -, EXC: 0, State: S, CPU: 0, CMD: Web Content

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 34448, dst_ip: 192.168.1.193, dst_port: 21, proto: tcp, service: -, duration: 0.000016, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 60, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 53, dst_ip: 176.28.50.165, dst_port: 53, proto: tcp, service: -, duration: 0.005432, src_bytes: 0, dst_bytes: 0, conn_state: RSTO, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 240, dst_pkts: 2, dst_ip_bytes: 88, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2618, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: unity-panel-se, attack: 0

[Assistant] normal


[User] PID: 3813, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 36493, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.052685, src_bytes: 66, dst_bytes: 382, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 122, dst_pkts: 2, dst_ip_bytes: 438, dns_query: cdn.viglink.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 92, dst_ip: 192.168.1.152, dst_port: 92, proto: tcp, service: -, duration: 0.000503, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2457, MINFLT: 0, MAJFLT: 0, VSTEXT: 415, VSIZE: 40428, RSIZE: 2240, VGROW: 0, RGROW: 0, MEM: 0, CMD: dbus-daemon

[Assistant] attack


[User] Processor(_Total) DPC Rate: 1, Processor(_Total) pct_ Idle Time: 91.66666667, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 7.604166667, Processor(_Total) pct_ C1 Time: 86.66666667, Processor(_Total) pct_ Processor Time: 8.333333333, Processor(_Total) C1 Transitions sec: 942.0410102, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 0.729166667, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 21.66760993, Processor(_Total) Interrupts sec: 1076.180183, Process(_Total) Pool Paged Bytes: 7746216, Process(_Total) IO Read Operations sec: 79.13677842, Process(_Total) Working Set - Private: 387526656, Process(_Total) Working Set Peak: 1554243584, Process(_Total) IO Write Operations sec: 74.20323031, Process(_Total) Page File Bytes: 1040936960, Process(_Total) pct_ User Time: 7.604166667, Process(_Total) Virtual Bytes Peak: 6946545664, Process(_Total) Page File Bytes Peak: 1324269568, Process(_Total) IO Other Bytes sec: 1547.334027, Process(_Total) Private Bytes: 1040936960, Process(_Total) IO Write Bytes sec: 45012.2262, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 5848137728, Process(_Total) pct_ Processor Time: 100, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 932936, Process(_Total) Working Set: 530567168, Process(_Total) Page Faults sec: 970.7089249, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 74.6699173, Process(_Total) IO Data Operations sec: 153.3400087, Process(_Total) Thread Count: 533, Process(_Total) pct_ Privileged Time: 92.39583333, Process(_Total) IO Data Bytes sec: 90099.38899, Process(_Total) IO Read Bytes sec: 45087.16279, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13639, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 1257.388072, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 94.07076188, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 1351.458834, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 1.533400087, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 2.533443623, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 4.06684371, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 1.533400087, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 2.533443623, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 101150720, Memory Free & Zero Page List Bytes: 16125952, Memory Cache Bytes Peak: 80883712, Memory System Code Resident Bytes: 1421312, Memory Available Bytes: 302546944, Memory Commit Limit: 2146951168, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0.533356552, Memory Demand Zero Faults sec: 572.6249283, Memory Available KBytes: 295456, Memory Pages sec: 2.400104485, Memory Cache Bytes: 2588672, Memory Pool Nonpaged Bytes: 56877056, Memory Page Faults sec: 976.8425252, Memory Transition Faults sec: 404.2175969, Memory System Cache Resident Bytes: 2588672, Memory Standby Cache Reserve Bytes: 13619200, Memory Page Writes sec: 0, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 107536384, Memory System Driver Resident Bytes: 3055616, Memory Standby Cache Normal Priority Bytes: 165265408, Memory Pool Paged Allocs: 71082, Memory Pool Nonpaged Allocs: 56809, Memory pct_ Committed Bytes In Use: 66.02608374, Memory Free System Page Table Entries: 33562654, Memory Available MBytes: 288, Memory Modified Page List Bytes: 282624, Memory Cache Faults sec: 0.533356552, Memory Committed Bytes: 1417547776, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 2.400104485, Memory Pool Paged Resident Bytes: 30990336, Memory Write Copies sec: 0

[Assistant] normal


[User] date: 28-Apr-19, time:  09:06:30 , temperature: 40.83467691, pressure: 2.787709915, humidity: 51.30308974

[Assistant] attack


[User] date: 2-Apr-19, time:    04:05:39   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] PID: 4063, RDDSK: 0, WRDSK: 8, WCANCL: 0, DSK: 0, CMD: atop, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 51646, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000047, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 5843, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 0

[Assistant] normal


[User] PID: 3871, RDDSK: 0, WRDSK: 8, WCANCL: 0, DSK: 0.01, CMD: apache2, attack: 1

[Assistant] attack


[User] Processor(_Total) DPC Rate: 3, Processor(_Total) pct_ Idle Time: 82.713718, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.208346897, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 1.041734484, Processor(_Total) pct_ C1 Time: 80.00520834, Processor(_Total) pct_ Processor Time: 17.286282, Processor(_Total) C1 Transitions sec: 2831.555653, Processor(_Total) pct_ DPC Time: 0.104173448, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 16.25105794, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 2610.94872, Processor(_Total) Interrupts sec: 3822.386792, Process(_Total) Pool Paged Bytes: 7920656, Process(_Total) IO Read Operations sec: 7.866913898, Process(_Total) Working Set - Private: 756535296, Process(_Total) Working Set Peak: 2069266432, Process(_Total) IO Write Operations sec: 1.666719046, Process(_Total) Page File Bytes: 1965236224, Process(_Total) pct_ User Time: 1.041734484, Process(_Total) Virtual Bytes Peak: 8062967808, Process(_Total) Page File Bytes Peak: 2311368704, Process(_Total) IO Other Bytes sec: 11593.56435, Process(_Total) Private Bytes: 1965236224, Process(_Total) IO Write Bytes sec: 5280.499282, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6939312128, Process(_Total) pct_ Processor Time: 99.69399008, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1143960, Process(_Total) Working Set: 814100480, Process(_Total) Page Faults sec: 5005.490639, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 549.4839351, Process(_Total) IO Data Operations sec: 9.533632944, Process(_Total) Thread Count: 545, Process(_Total) pct_ Privileged Time: 98.6522556, Process(_Total) IO Data Bytes sec: 5631.043632, Process(_Total) IO Read Bytes sec: 350.5443498, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13937, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 216.0067884, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 59.33519804, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 275.3419864, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 0.666687618, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 1.733387808, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 2.400075426, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 0.666687618, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 1.733387808, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 97292288, Memory Free & Zero Page List Bytes: 102400, Memory Cache Bytes Peak: 80883712, Memory System Code Resident Bytes: 729088, Memory Available Bytes: 839680, Memory Commit Limit: 2567745536, Memory Transition Pages RePurposed sec: 6615.141225, Memory Pages Output sec: 3821.520098, Memory Page Reads sec: 2141.667305, Memory Demand Zero Faults sec: 935.0293849, Memory Available KBytes: 820, Memory Pages sec: 11579.96392, Memory Cache Bytes: 323584, Memory Pool Nonpaged Bytes: 56975360, Memory Page Faults sec: 5169.895806, Memory Transition Faults sec: 2092.799103, Memory System Cache Resident Bytes: 323584, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 538.1502456, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 245760, Memory System Driver Resident Bytes: 1552384, Memory Standby Cache Normal Priority Bytes: 491520, Memory Pool Paged Allocs: 61805, Memory Pool Nonpaged Allocs: 53358, Memory pct_ Committed Bytes In Use: 90.49244606, Memory Free System Page Table Entries: 33563833, Memory Available MBytes: 0, Memory Modified Page List Bytes: 53248, Memory Cache Faults sec: 0.866693904, Memory Committed Bytes: 2323615744, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 7758.443822, Memory Pool Paged Resident Bytes: 11894784, Memory Write Copies sec: 0

[Assistant] normal


[User] date: 31-Mar-19, time: 12:42:17, FC1_Read_Input_Register: 13139, FC2_Read_Discrete_Value: 30807, FC3_Read_Holding_Register: 32514, FC4_Read_Coil: 9441

[Assistant] normal


[User] PID: 2420, MINFLT: 0, MAJFLT: 0, VSTEXT: 415, VSIZE: 40212, RSIZE: 1896, VGROW: 0, RGROW: 0, MEM: 0, CMD: dbus-daemon

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:07, motion_status: 1, light_status:  on

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 55360, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.427241, src_bytes: 484, dst_bytes: 1919, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 752, dst_pkts: 6, dst_ip_bytes: 2239, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 58448, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: -, duration: 0.306743, src_bytes: 640, dst_bytes: 1919, conn_state: SHR, missed_bytes: 0, src_pkts: 3, src_ip_bytes: 795, dst_pkts: 5, dst_ip_bytes: 2179, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3257, TRUN: 0, TSLPI: 22, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0.13, CMD: Web-Content

[Assistant] normal


[User] date: 25-Apr-19, time: 8:25:33, current_temperature: 30.4885535, thermostat_status: 1

[Assistant] attack


[User] PID: 1851, TRUN: 0, TSLPI: 2, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: vmtoolsd

[Assistant] normal


[User] PID: 3793, TRUN: 1, TSLPI: 11, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0.98, CMD: drone

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 53192, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.01922, src_bytes: 76, dst_bytes: 192, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 132, dst_pkts: 2, dst_ip_bytes: 248, dns_query: fonts.googleapis.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 34296, dst_ip: 192.168.1.152, dst_port: 10502, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 25-Apr-19, time: 9:57:56, temperature: 42.41045326, pressure: -1.072622208, humidity: 49.58503679

[Assistant] attack


[User] PID: 2844, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: atop, attack: 1

[Assistant] attack


[User] PID: 1134, MINFLT: 14, MAJFLT: 0, VSTEXT: 152, VSIZE: 23552, RSIZE: 1404, VGROW: 0, RGROW: 0, MEM: 0, CMD: vsftpd

[Assistant] attack


[User] Processor_DPC_Rate: 1, Processor_pct_ Idle_Time: 30.13171108, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.156495814, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 64.24153174, Processor_pct_ C1_Time: 30.13171108, Processor_pct_ Processor_Time: 67.99660599, Processor_C1_ransitions_sec: 254.9988977, Processor_pct_ DPC_Time: 0.078247907, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 3.755899542, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 229.7594153, Processor_Interrupts_sec: 752.4771085, Process_Pool_Paged Bytes: 14938592, Process_IO Read_Operations_sec: 54.68554522, Process_Working_Set_ Private: 1162928128, Process_Working_Set_Peak: 5639348224, Process_IO_Write Operations_sec: 172.6701098, Process_Page_File Bytes: 2226458624, Process_pct_ User_Time: 128.4830635, Process_Virtual_Bytes Peak: 1.12E+14, Process_Page_File Bytes Peak: 9210052608, Process_IO_Other_Bytes_sec: 93555.3497, Process_Private_Bytes: 2226458624, Process_IO_Write_Bytes_sec: 206866.9043, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.12E+14, Process_pct_ Processor_Time: 199.5321631, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 1961528, Process_Working Set: 1318936576, Process_Page Faults_sec: 585.1153026, Process_ID Process: 0, Process_IO Other Operations_sec: 1068.471422, Process_IO Data Operations_sec: 227.3556551, Process_Thread Count: 787, Process_pct_ Privileged_Time: 71.04909966, Process_IO Data Bytes_sec: 710415.9117, Process_IO Read Bytes_sec: 503549.0075, Process_Priority Base: 0, Process_Handle Count: 29850, Network_I(Intel R _82574L_GNC)TCP_APS: 0, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 2943.805028, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 205.5214996, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 3149.326527, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 3.805953697, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 6.510183955, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 10.31613765, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 0, Network_I(Intel R _82574L_GNC) Packets Sent sec: 3.805953697, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 6.510183955, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 275267584, Memory Free & Zero Page List Bytes: 2838528, Memory Cache Bytes Peak: 815652864, Memory System Code Resident Bytes: 1761280, Memory Available Bytes: 208879616, Memory Commit Limit: 6444666880, Memory Transition Pages RePurposed sec: 155.2428482, Memory Pages Output sec: 0, Memory Page Reads sec: 26.94214591, Memory Demand Zero Faults sec: 766.9998266, Memory Available KBytes: 203984, Memory Pages sec: 77.62142408, Memory Cache Bytes: 32878592, Memory Pool Nonpaged Bytes: 88952832, Memory Page Faults sec: 822.7870953, Memory Transition Faults sec: 64.9015262, Memory System Cache Resident Bytes: 0, Memory Long-Term Average Standby Cache Lifetime (s): 41, Memory Standby Cache Reserve Bytes: 4620288, Memory Page Writes sec: 0, Memory System Code Total Bytes: 3825664, Memory Standby Cache Core Bytes: 149639168, Memory System Driver Resident Bytes: 3338240, Memory Standby Cache Normal Priority Bytes: 51781632, Memory Pool Paged Allocs: 161897, Memory Pool Nonpaged Allocs: 116649, Memory pct_ Committed Bytes In Use: 48.73455976, Memory Free System Page Table Entries: 12229028, Memory Available MBytes: 199, Memory Modified Page List Bytes: 11362304, Memory Cache Faults sec: 150.4353277, Memory Committed Bytes: 3140780032, Memory System Driver Total Bytes: 17158144, Memory Pages Input sec: 77.62142408, Memory Pool Paged Resident Bytes: 124387328, Memory Write Copies sec: 0.100156676, LogicalDisk(_Total) Avg  Disk Bytes Write: 15312.81911, LogicalDisk(_Total) pct_ Idle Time: 94.9290138, LogicalDisk(_Total) Disk Reads sec: 22.73556551, LogicalDisk(_Total) pct_ Free Space: 82.38168133, LogicalDisk(_Total) Disk Read Bytes sec: 260247.1075, LogicalDisk(_Total) Avg  Disk sec Read: 0.000474055, LogicalDisk(_Total) Disk Writes sec: 29.34590614, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 1.101723439, LogicalDisk(_Total) Free Megabytes: 168445, LogicalDisk(_Total) Avg  Disk sec Write: 0.001382329, LogicalDisk(_Total) Disk Bytes sec: 709615.6599, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.010777989, LogicalDisk(_Total) pct_ Disk Time: 5.134391795, LogicalDisk(_Total) Avg  Disk Bytes Read: 11446.69604, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.040565929, LogicalDisk(_Total) Avg  Disk Queue Length: 0.051343918, LogicalDisk(_Total) pct_ Disk Read Time: 1.077798942, LogicalDisk(_Total) Disk Write Bytes sec: 449368.5524, LogicalDisk(_Total) Disk Transfers sec: 52.08147164, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 13625.10769, LogicalDisk(_Total) pct_ Disk Write Time: 4.056592853, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000985832

[Assistant] normal


[User] PID: 2577, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vmtoolsd, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 59784, dst_ip: 104.244.38.20, dst_port: 443, proto: tcp, service: ssl, duration: 13.160587, src_bytes: 12307, dst_bytes: 7214, conn_state: SF, missed_bytes: 0, src_pkts: 26, src_ip_bytes: 13667, dst_pkts: 20, dst_ip_bytes: 8262, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 43828, dst_ip: 192.168.1.184, dst_port: 443, proto: tcp, service: -, duration: 0.000004, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time:    12:38:49   , fridge_temperature: 10.95, temp_condition: high

[Assistant] normal


[User] date: 25-Apr-19, time:  23:57:05 , motion_status: 1, light_status:  on

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 35787, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000031, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:39, FC1_Read_Input_Register: 13633, FC2_Read_Discrete_Value: 14523, FC3_Read_Holding_Register: 20068, FC4_Read_Coil: 62941

[Assistant] normal


[User] PID: 3257, MINFLT: 8640, MAJFLT: 0, VSTEXT: 193, VSIZE: 1.7, RSIZE: 214.2, VGROW: 2048, RGROW: 25592, MEM: 0.06, CMD: Web-Content

[Assistant] normal


[User] date: 31-Mar-19, time:    12:41:32   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] src_ip: 192.168.1.190, src_port: 3, dst_ip: 203.119.86.101, dst_port: 3, proto: icmp, service: -, duration: 17.374729, src_bytes: 1096, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 1152, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 3390, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: ostinato, attack: 1

[Assistant] attack


[User] date: 25-Apr-19, time: 22:31:58, temperature: 25.17940379, pressure: -10.04599986, humidity: 41.68350122

[Assistant] attack


[User] PID: 4372, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] date: 31-Mar-19, time:    12:43:41   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] PID: 1481, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: named, attack: 1

[Assistant] attack


[User] date: 26-Apr-19, time:  15:58:22 , current_temperature: 27.99399289, thermostat_status: 1

[Assistant] attack


[User] PID: 2797, MINFLT: 8, MAJFLT: 0, VSTEXT: 1350, VSIZE: 1.4, RSIZE: 91636, VGROW: 0, RGROW: 0, MEM: 0.02, CMD: nautilus

[Assistant] normal


[User] PID: 4373, MINFLT: 2074, MAJFLT: 0, VSTEXT: 148, VSIZE: 17648, RSIZE: 2428, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] PID: 2807, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: fwupd, attack: 1

[Assistant] attack


[User] PID: 11166, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <imap-login>, attack: 1

[Assistant] attack


[User] date: 31-Mar-19, time: 12:39:39, latitude: 0.822379632, longitude: 11.2028294

[Assistant] normal


[User] date: 31-Mar-19, time:    12:39:51   , fridge_temperature: 12, temp_condition: high

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 68, dst_ip: 192.168.1.190, dst_port: 68, proto: tcp, service: -, duration: 0.000001, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 37224, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 0.047128, src_bytes: 214, dst_bytes: 1486, conn_state: SF, missed_bytes: 1486, src_pkts: 5, src_ip_bytes: 434, dst_pkts: 3, dst_ip_bytes: 132, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 26-Apr-19, time:  16:17:51 , latitude: 85.93631325, longitude: 91.99434022

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 49500, dst_ip: 192.168.1.250, dst_port: 2107, proto: tcp, service: -, duration: 1.058664, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1496, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: 0, EXC: 0, State: S, CPU: 0.04, CMD: Xorg

[Assistant] attack


[User] date: 26-Apr-19, time:  17:32:44 , motion_status: 0, light_status:  off

[Assistant] attack


[User] src_ip: 192.168.1.37, src_port: 4444, dst_ip: 192.168.1.193, dst_port: 49158, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 1500, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49520, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.000176, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 172.17.0.7, src_port: 47761, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.010709, src_bytes: 0, dst_bytes: 178, conn_state: SHR, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 2, dst_ip_bytes: 234, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.37, src_port: 37309, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:36, FC1_Read_Input_Register: 43993, FC2_Read_Discrete_Value: 14808, FC3_Read_Holding_Register: 8807, FC4_Read_Coil: 62323

[Assistant] normal


[User] date: 25-Apr-19, time:  15:45:47 , latitude: 34.04466975, longitude: 43.32346695

[Assistant] attack


[User] date: 25-Apr-19, time:  09:50:56 , FC1_Read_Input_Register: 32764, FC2_Read_Discrete_Value: 6769, FC3_Read_Holding_Register: 32501, FC4_Read_Coil: 46999

[Assistant] attack


[User] PID: 9657, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <lsb_release>, attack: 1

[Assistant] attack


[User] PID: 4147, MINFLT: 0, MAJFLT: 0, VSTEXT: 280, VSIZE: 711.4, RSIZE: 22608, VGROW: 0, RGROW: 0, MEM: 0.01, CMD: gnome-terminal

[Assistant] attack


[User] PID: 2536, MINFLT: 33, MAJFLT: 0, VSTEXT: 589, VSIZE: 630.8, RSIZE: 24272, VGROW: 132, RGROW: 264, MEM: 0.01, CMD: hud-service

[Assistant] attack


[User] PID: 4374, MINFLT: 2073, MAJFLT: 0, VSTEXT: 148, VSIZE: 17948, RSIZE: 2480, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 54770, dst_ip: 192.168.1.49, dst_port: 10628, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3790, MINFLT: 0, MAJFLT: 0, VSTEXT: 2132, VSIZE: 2.4, RSIZE: 25368, VGROW: 0, RGROW: 0, MEM: 0.01, CMD: ostinato

[Assistant] normal


[User] date: 28-Apr-19, time:  09:08:46 , latitude: 38.73675516, longitude: 50.25963513

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:33, temperature: 24.84606754, pressure: 1.287805297, humidity: 56.90552747

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49162, dst_ip: 192.168.1.37, dst_port: 8001, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 228, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3940, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: worer/0:1-mp, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.33, src_port: 34473, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 184, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 23-Apr-19, time:  23:49:27 , latitude: 245.315971, longitude: 248.9419399

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 41870, dst_ip: 172.217.25.142, dst_port: 443, proto: tcp, service: ssl, duration: 181.028915, src_bytes: 32954, dst_bytes: 3064, conn_state: SF, missed_bytes: 0, src_pkts: 42, src_ip_bytes: 35146, dst_pkts: 26, dst_ip_bytes: 4424, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 26-Apr-19, time:  06:58:36 , latitude: 510.5937301, longitude: 533.2833181

[Assistant] attack


[User] PID: 10625, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <cron>, attack: 0

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:16, latitude: 3.085042841, longitude: 13.36897054

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 54262, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] Processor(_Total) DPC Rate: 63, Processor(_Total) pct_ Idle Time: 74.6875, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.208333333, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 0.9375, Processor(_Total) pct_ C1 Time: 73.33333333, Processor(_Total) pct_ Processor Time: 25.3125, Processor(_Total) C1 Transitions sec: 3649.03486, Processor(_Total) pct_ DPC Time: 0.208333333, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 24.375, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 3536.033781, Processor(_Total) Interrupts sec: 4940.580532, Process(_Total) Pool Paged Bytes: 7770368, Process(_Total) IO Read Operations sec: 129.3345689, Process(_Total) Working Set - Private: 800296960, Process(_Total) Working Set Peak: 2003365888, Process(_Total) IO Write Operations sec: 128.7345632, Process(_Total) Page File Bytes: 2245255168, Process(_Total) pct_ User Time: 0.9375, Process(_Total) Virtual Bytes Peak: 7889412096, Process(_Total) Page File Bytes Peak: 2584141824, Process(_Total) IO Other Bytes sec: 7572.472342, Process(_Total) Private Bytes: 2245255168, Process(_Total) IO Write Bytes sec: 27755.39849, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6856286208, Process(_Total) pct_ Processor Time: 99.58333333, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1239728, Process(_Total) Working Set: 851263488, Process(_Total) Page Faults sec: 4796.379155, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 390.1370604, Process(_Total) IO Data Operations sec: 258.0691321, Process(_Total) Thread Count: 540, Process(_Total) pct_ Privileged Time: 98.64583333, Process(_Total) IO Data Bytes sec: 54961.52507, Process(_Total) IO Read Bytes sec: 27206.12658, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13270, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 78.00074517, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 74.00070695, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 152.0014521, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 1.000009553, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 1.000009553, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 2.000019107, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 1.000009553, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 1.000009553, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 90992640, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 692224, Memory Available Bytes: 11218944, Memory Commit Limit: 2885148672, Memory Transition Pages RePurposed sec: 4548.910124, Memory Pages Output sec: 6452.594977, Memory Page Reads sec: 2365.422598, Memory Demand Zero Faults sec: 476.2712166, Memory Available KBytes: 10956, Memory Pages sec: 11580.91064, Memory Cache Bytes: 499712, Memory Pool Nonpaged Bytes: 52973568, Memory Page Faults sec: 4903.113508, Memory Transition Faults sec: 2061.619695, Memory System Cache Resident Bytes: 499712, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 1249.011932, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 159744, Memory System Driver Resident Bytes: 1200128, Memory Standby Cache Normal Priority Bytes: 11059200, Memory Pool Paged Allocs: 58577, Memory Pool Nonpaged Allocs: 51102, Memory pct_ Committed Bytes In Use: 90.02586665, Memory Free System Page Table Entries: 33562140, Memory Available MBytes: 10, Memory Modified Page List Bytes: 49152, Memory Cache Faults sec: 0.466671125, Memory Committed Bytes: 2597380096, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 5128.315659, Memory Pool Paged Resident Bytes: 10358784, Memory Write Copies sec: 0

[Assistant] normal


[User] PID: 4375, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.195, src_port: 1335, dst_ip: 192.168.1.195, dst_port: 1335, proto: tcp, service: -, duration: 0.238982, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 3480, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 37846, dst_ip: 192.168.1.184, dst_port: 443, proto: tcp, service: -, duration: 60.383046, src_bytes: 0, dst_bytes: 0, conn_state: S3, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 3, dst_ip_bytes: 164, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 1-Apr-19, time:  20:38:50 , motion_status: 1, light_status:  on

[Assistant] normal


[User] PID: 1371, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: irqbalance

[Assistant] normal


[User] date: 28-Apr-19, time:  04:19:03 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 85, dst_ip: 192.168.1.190, dst_port: 85, proto: tcp, service: -, duration: 0.000339, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time:    12:39:59   , fridge_temperature: 4.95, temp_condition: low

[Assistant] normal


[User] PID: 3793, TRUN: 1, TSLPI: 11, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 1, CMD: drone

[Assistant] normal


[User] PID: 3103, MINFLT: 0, MAJFLT: 0, VSTEXT: 2132, VSIZE: 2.5, RSIZE: 28220, VGROW: 0, RGROW: 0, MEM: 0.01, CMD: ostinato

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 50951, dst_ip: 192.168.1.133, dst_port: 3871, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 34296, dst_ip: 192.168.1.152, dst_port: 10502, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 26-Apr-19, time:  14:58:38 , latitude: 42.54355352, longitude: 52.02980694

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:08, FC1_Read_Input_Register: 23792, FC2_Read_Discrete_Value: 23788, FC3_Read_Holding_Register: 6311, FC4_Read_Coil: 32366

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:24, temperature: 27.05619433, pressure: 1.035, humidity: 7.468128504

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 76.76922353, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 20.82665903, Processor_pct_ C1_Time: 76.76922353, Processor_pct_ Processor_Time: 22.69955395, Processor_C1_ransitions_sec: 128.2982382, Processor_pct_ DPC_Time: 0.078002468, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 1.872059238, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 22.1651431, Processor_Interrupts_sec: 609.4415922, Process_Pool_Paged Bytes: 19971400, Process_IO Read_Operations_sec: 2.196545712, Process_Working_Set_ Private: 1722347520, Process_Working_Set_Peak: 5442297856, Process_IO_Write Operations_sec: 1.29795883, Process_Page_File Bytes: 2762067968, Process_pct_ User_Time: 41.65331805, Process_Virtual_Bytes Peak: 1.44E+14, Process_Page_File Bytes Peak: 3819261952, Process_IO_Other_Bytes_sec: 3622.902623, Process_Private_Bytes: 2762067968, Process_IO_Write_Bytes_sec: 6699.464422, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.44E+14, Process_pct_ Processor_Time: 199.8423237, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2150896, Process_Working Set: 2259988480, Process_Page Faults_sec: 582.5838287, Process_ID Process: 0, Process_IO Other Operations_sec: 60.20532111, Process_IO Data Operations_sec: 3.494504542, Process_Thread Count: 916, Process_pct_ Privileged_Time: 158.1890056, Process_IO Data Bytes_sec: 6945.07817, Process_IO Read Bytes_sec: 245.6137478, Process_Priority Base: 0, Process_Handle Count: 35884, Network_I(Intel R _82574L_GNC)TCP_APS: 4873, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4744.538738, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 215.6608517, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 4960.19959, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 3.993719477, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 5.890736228, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 9.884455705, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 2, Network_I(Intel R _82574L_GNC) Packets Sent sec: 3.993719477, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 5.890736228, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 109211648, Memory Free & Zero Page List Bytes: 18018304, Memory Cache Bytes Peak: 157425664, Memory System Code Resident Bytes: 0, Memory Available Bytes: 364445696, Memory Commit Limit: 8460087296, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 763.9985359, Memory Available KBytes: 355904, Memory Pages sec: 0, Memory Cache Bytes: 29294592, Memory Pool Nonpaged Bytes: 93638656, Memory Page Faults sec: 582.5838287, Memory Transition Faults sec: 5.890736228, Memory System Cache Resident Bytes: 29294592, Memory Long-Term Average Standby Cache Lifetime (s): 23, Memory Standby Cache Reserve Bytes: 34299904, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 158650368, Memory System Driver Resident Bytes: 4382720, Memory Standby Cache Normal Priority Bytes: 153477120, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 43.09741551, Memory Free System Page Table Entries: 4294967295, Memory Available MBytes: 347, Memory Modified Page List Bytes: 12660736, Memory Cache Faults sec: 0, Memory Committed Bytes: 3646078976, Memory System Driver Total Bytes: 18259968, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 78536704, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 15798.85714, LogicalDisk(_Total) pct_ Idle Time: 99.98645328, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 81.27165145, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 0.698900908, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 166333, LogicalDisk(_Total) Avg  Disk sec Write: 0.000585729, LogicalDisk(_Total) Disk Bytes sec: 11041.83561, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.013645565, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000409367, LogicalDisk(_Total) Avg  Disk Queue Length: 0.000409367, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 11041.83561, LogicalDisk(_Total) Disk Transfers sec: 0.698900908, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 15798.85714, LogicalDisk(_Total) pct_ Disk Write Time: 0.013645565, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000585729

[Assistant] normal


[User] src_ip: 192.168.1.37, src_port: 41067, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 60, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49557, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000175, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:55, latitude: 2.495832252, longitude: 11.70656065

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:52, FC1_Read_Input_Register: 37030, FC2_Read_Discrete_Value: 158, FC3_Read_Holding_Register: 39438, FC4_Read_Coil: 35754

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:13, current_temperature: 26.44479311, thermostat_status: 1

[Assistant] normal


[User] PID: 7361, RDDSK: 0, WRDSK: 4, WCANCL: 0, DSK: 0.03, CMD: vsftpd, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 41852, dst_ip: 192.168.1.184, dst_port: 443, proto: tcp, service: -, duration: 60.537887, src_bytes: 0, dst_bytes: 0, conn_state: S3, missed_bytes: 0, src_pkts: 3, src_ip_bytes: 164, dst_pkts: 2, dst_ip_bytes: 112, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:24, temperature: 41.47855948, pressure: 1.271852277, humidity: 76.4973616

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 34296, dst_ip: 192.168.1.152, dst_port: 10502, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 2794, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: nautilus, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 29, dst_ip: 192.168.1.193, dst_port: 29, proto: tcp, service: -, duration: 0.000002, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:  00:24:46 , motion_status: 0, light_status:  off

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 60016, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 125.088019, src_bytes: 3148, dst_bytes: 3629, conn_state: RSTR, missed_bytes: 0, src_pkts: 7, src_ip_bytes: 3448, dst_pkts: 7, dst_ip_bytes: 3921, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  09:44:37 , latitude: 58.38614597, longitude: 69.95652156

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 39034, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] Processor(_Total) DPC Rate: 61, Processor(_Total) pct_ Idle Time: 79.26567261, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 1.249918622, Processor(_Total) pct_ C1 Time: 79.99479181, Processor(_Total) pct_ Processor Time: 20.73432739, Processor(_Total) C1 Transitions sec: 2937.843002, Processor(_Total) pct_ DPC Time: 0.520799426, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 19.47789853, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 2664.457611, Processor(_Total) Interrupts sec: 3827.395464, Process(_Total) Pool Paged Bytes: 7976296, Process(_Total) IO Read Operations sec: 0.666631042, Process(_Total) Working Set - Private: 775118848, Process(_Total) Working Set Peak: 2064670720, Process(_Total) IO Write Operations sec: 0.79995725, Process(_Total) Page File Bytes: 2116657152, Process(_Total) pct_ User Time: 1.249918622, Process(_Total) Virtual Bytes Peak: 8157024256, Process(_Total) Page File Bytes Peak: 2758594560, Process(_Total) IO Other Bytes sec: 5891.018517, Process(_Total) Private Bytes: 2116657152, Process(_Total) IO Write Bytes sec: 1264.199108, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6855319552, Process(_Total) pct_ Processor Time: 99.47269033, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1070120, Process(_Total) Working Set: 826712064, Process(_Total) Page Faults sec: 3722.73439, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 250.8532611, Process(_Total) IO Data Operations sec: 1.466588292, Process(_Total) Thread Count: 554, Process(_Total) pct_ Privileged Time: 98.22277171, Process(_Total) IO Data Bytes sec: 1359.260694, Process(_Total) IO Read Bytes sec: 95.06158658, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 14123, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 95.4615652, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 86.06206751, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 181.5236327, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 1.26659898, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 1.26659898, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 2.533197959, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 1.26659898, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 1.26659898, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 92979200, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 720896, Memory Available Bytes: 10944512, Memory Commit Limit: 2918703104, Memory Transition Pages RePurposed sec: 3775.864884, Memory Pages Output sec: 2396.471933, Memory Page Reads sec: 2250.013093, Memory Demand Zero Faults sec: 523.4386941, Memory Available KBytes: 10688, Memory Pages sec: 7228.880355, Memory Cache Bytes: 438272, Memory Pool Nonpaged Bytes: 79339520, Memory Page Faults sec: 3889.992119, Memory Transition Faults sec: 1117.740268, Memory System Cache Resident Bytes: 438272, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 428.3104444, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 331776, Memory System Driver Resident Bytes: 1433600, Memory Standby Cache Normal Priority Bytes: 10612736, Memory Pool Paged Allocs: 59523, Memory Pool Nonpaged Allocs: 58485, Memory pct_ Committed Bytes In Use: 85.23156893, Memory Free System Page Table Entries: 33562140, Memory Available MBytes: 10, Memory Modified Page List Bytes: 69632, Memory Cache Faults sec: 0.533304834, Memory Committed Bytes: 2487656448, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 4832.408423, Memory Pool Paged Resident Bytes: 11038720, Memory Write Copies sec: 0

[Assistant] normal


[User] date: 31-Mar-19, time:    12:44:46   , fridge_temperature: 10.8, temp_condition: high

[Assistant] normal


[User] date: 31-Mar-19, time: 12:42:14, temperature: 38.45109989, pressure: 1.13348592, humidity: 90.02982298

[Assistant] normal


[User] date: 28-Apr-19, time: 4:44:25, temperature: 37.85336003, pressure: 1.744944361, humidity: 8.847464599

[Assistant] attack


[User] PID: 2433, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: dbus-daemon, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49854, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000298, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:39:34, latitude: 1.201866551, longitude: 11.07205775

[Assistant] normal


[User] PID: 2787, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: 0, EXC: 0, State: S, CPU: 0, CMD: goa-daemon

[Assistant] attack


[User] PID: 2579, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: upstart-dbus-b, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.195, src_port: 1693, dst_ip: 192.168.1.195, dst_port: 1693, proto: tcp, service: -, duration: 0.230193, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.79, src_port: 41615, dst_ip: 192.168.1.255, dst_port: 15600, proto: udp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 63, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 2-Apr-19, time:  04:06:48 , motion_status: 0, light_status:  off

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49460, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.000142, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:14, latitude: 0.512218737, longitude: 10.38185122

[Assistant] normal


[User] PID: 2498, MINFLT: 0, MAJFLT: 0, VSTEXT: 121, VSIZE: 22412, RSIZE: 464, VGROW: 0, RGROW: 0, MEM: 0, CMD: upstart-dbus-b

[Assistant] normal


[User] PID: 6688, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 4, Status: -, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] PID: 3675, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: atop

[Assistant] normal


[User] PID: 1496, MINFLT: 0, MAJFLT: 0, VSTEXT: 2219, VSIZE: 348.3, RSIZE: 78996, VGROW: 0, RGROW: 0, MEM: 0.02, CMD: Xorg

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 35352, dst_ip: 104.193.19.59, dst_port: 443, proto: tcp, service: -, duration: 2.066289, src_bytes: 32, dst_bytes: 31, conn_state: SF, missed_bytes: 0, src_pkts: 4, src_ip_bytes: 191, dst_pkts: 3, dst_ip_bytes: 151, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:40:24, temperature: 23.80911885, pressure: 1.497092488, humidity: 21.10882337

[Assistant] normal


[User] PID: 5719, RDDSK: 0, WRDSK: 172, WCANCL: 0, DSK: 0.08, CMD: apache2, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 40062, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 27-Apr-19, time:  05:25:22 , FC1_Read_Input_Register: 29747, FC2_Read_Discrete_Value: 62535, FC3_Read_Holding_Register: 7640, FC4_Read_Coil: 8834

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 37888, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000041, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 10862, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <vsftpd>, attack: 0

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:00, temperature: 41.71566095, pressure: 1.015443778, humidity: 86.20658111

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:26, FC1_Read_Input_Register: 56285, FC2_Read_Discrete_Value: 59182, FC3_Read_Holding_Register: 61829, FC4_Read_Coil: 6631

[Assistant] normal


[User] PID: 1269, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: mysqld, attack: 1

[Assistant] attack


[User] PID: 6958, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: systemd-udevd, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 43044, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000029, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 38181, dst_ip: 192.168.1.133, dst_port: 1059, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  04:35:48 , fridge_temperature: 10.1, temp_condition: high

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 55423, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.00004, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal