[User] src_ip: 192.168.1.152, src_port: 34296, dst_ip: 192.168.1.152, dst_port: 10502, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 1-Apr-19, time:  15:11:17 , latitude: 8.013701494, longitude: 17.1269624

[Assistant] normal


[User] PID: 3197, TRUN: 0, TSLPI: 60, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: firefox

[Assistant] normal


[User] date: 1-Apr-19, time:  17:25:38 , latitude: 77.88006712, longitude: 90.06438133

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 35971, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.00004, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 55, dst_ip: 192.168.1.190, dst_port: 55, proto: tcp, service: -, duration: 0.000169, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2533, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: hud-service

[Assistant] normal


[User] src_ip: 192.168.1.33, src_port: 43777, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 1205, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] Processor(_Total) DPC Rate: 79, Processor(_Total) pct_ Idle Time: 52.79503106, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.621118012, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 11.38716356, Processor(_Total) pct_ C1 Time: 46.37681159, Processor(_Total) pct_ Processor Time: 47.20496894, Processor(_Total) C1 Transitions sec: 2935.05178, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 35.81780538, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 3452.869592, Processor(_Total) Interrupts sec: 4445.839573, Process(_Total) Pool Paged Bytes: 8697872, Process(_Total) IO Read Operations sec: 9.540143929, Process(_Total) Working Set - Private: 973619200, Process(_Total) Working Set Peak: 2929799168, Process(_Total) IO Write Operations sec: 9.010135933, Process(_Total) Page File Bytes: 2330984448, Process(_Total) pct_ User Time: 11.38716356, Process(_Total) Virtual Bytes Peak: 9110876160, Process(_Total) Page File Bytes Peak: 2719703040, Process(_Total) IO Other Bytes sec: 3784.12459, Process(_Total) Private Bytes: 2330984448, Process(_Total) IO Write Bytes sec: 3530.052007, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 7878426624, Process(_Total) pct_ Processor Time: 99.37888199, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1168832, Process(_Total) Working Set: 1033224192, Process(_Total) Page Faults sec: 4576.486544, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 191.5316396, Process(_Total) IO Data Operations sec: 18.55027986, Process(_Total) Thread Count: 612, Process(_Total) pct_ Privileged Time: 87.99171843, Process(_Total) IO Data Bytes sec: 7132.78136, Process(_Total) IO Read Bytes sec: 3602.729353, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 14738, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 2608.96436, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 132.369497, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 2741.333857, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 2.451286982, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 4.902573963, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 7.353860945, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 2.451286982, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 4.902573963, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 96059392, Memory Free & Zero Page List Bytes: 155648, Memory Cache Bytes Peak: 25575424, Memory System Code Resident Bytes: 778240, Memory Available Bytes: 99610624, Memory Commit Limit: 3577511936, Memory Transition Pages RePurposed sec: 5784.109763, Memory Pages Output sec: 2170.912752, Memory Page Reads sec: 3045.955953, Memory Demand Zero Faults sec: 702.3930967, Memory Available KBytes: 97276, Memory Pages sec: 10293.6828, Memory Cache Bytes: 221184, Memory Pool Nonpaged Bytes: 59191296, Memory Page Faults sec: 4697.858375, Memory Transition Faults sec: 950.1718349, Memory System Cache Resident Bytes: 221184, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 676.6877089, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 63668224, Memory System Driver Resident Bytes: 1216512, Memory Standby Cache Normal Priority Bytes: 35786752, Memory Pool Paged Allocs: 61291, Memory Pool Nonpaged Allocs: 59752, Memory pct_ Committed Bytes In Use: 79.07068339, Memory Free System Page Table Entries: 33557321, Memory Available MBytes: 94, Memory Modified Page List Bytes: 4313088, Memory Cache Faults sec: 0.397505997, Memory Committed Bytes: 2828763136, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 8122.770045, Memory Pool Paged Resident Bytes: 10694656, Memory Write Copies sec: 0

[Assistant] attack


[User] date: 31-Mar-19, time: 12:42:07, FC1_Read_Input_Register: 7723, FC2_Read_Discrete_Value: 47033, FC3_Read_Holding_Register: 4635, FC4_Read_Coil: 50422

[Assistant] normal


[User] Processor(_Total) DPC Rate: 0, Processor(_Total) pct_ Idle Time: 97.8125, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 0.9375, Processor(_Total) pct_ C1 Time: 100, Processor(_Total) pct_ Processor Time: 2.1875, Processor(_Total) C1 Transitions sec: 128.0638501, Processor(_Total) pct_ DPC Time: 1.041666667, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 1.25, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 70.4651169, Processor(_Total) Interrupts sec: 134.8637006, Process(_Total) Pool Paged Bytes: 6395656, Process(_Total) IO Read Operations sec: 0.133330401, Process(_Total) Working Set - Private: 166789120, Process(_Total) Working Set Peak: 1154473984, Process(_Total) IO Write Operations sec: 0.0666652, Process(_Total) Page File Bytes: 620732416, Process(_Total) pct_ User Time: 0.9375, Process(_Total) Virtual Bytes Peak: 5360701440, Process(_Total) Page File Bytes Peak: 885444608, Process(_Total) IO Other Bytes sec: 1184.240621, Process(_Total) Private Bytes: 620732416, Process(_Total) IO Write Bytes sec: 4.533233632, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 4521918464, Process(_Total) pct_ Processor Time: 98.95833333, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 925632, Process(_Total) Working Set: 514338816, Process(_Total) Page Faults sec: 1.199973609, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 48.53226595, Process(_Total) IO Data Operations sec: 0.199995601, Process(_Total) Thread Count: 508, Process(_Total) pct_ Privileged Time: 98.02083333, Process(_Total) IO Data Bytes sec: 5.733207241, Process(_Total) IO Read Bytes sec: 1.199973609, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 14018, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 5154.15331, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 3994.045491, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 9148.198801, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 73.86504213, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 79.39825377, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 153.2632959, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 73.86504213, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 79.39825377, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 102727680, Memory Free & Zero Page List Bytes: 32739328, Memory Cache Bytes Peak: 135745536, Memory System Code Resident Bytes: 2023424, Memory Available Bytes: 547713024, Memory Commit Limit: 2146951168, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 1.199973609, Memory Available KBytes: 534876, Memory Pages sec: 0, Memory Cache Bytes: 12414976, Memory Pool Nonpaged Bytes: 60968960, Memory Page Faults sec: 1.199973609, Memory Transition Faults sec: 0.333326002, Memory System Cache Resident Bytes: 12414976, Memory Standby Cache Reserve Bytes: 466657280, Memory Page Writes sec: 0, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 29192192, Memory System Driver Resident Bytes: 3571712, Memory Standby Cache Normal Priority Bytes: 19124224, Memory Pool Paged Allocs: 87754, Memory Pool Nonpaged Allocs: 72257, Memory pct_ Committed Bytes In Use: 44.94541722, Memory Free System Page Table Entries: 33557896, Memory Available MBytes: 522, Memory Modified Page List Bytes: 24350720, Memory Cache Faults sec: 0, Memory Committed Bytes: 964956160, Memory System Driver Total Bytes: 5832704, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 32067584, Memory Write Copies sec: 0

[Assistant] normal


[User] date: 28-Apr-19, time:  04:05:23 , current_temperature: 28.95300165, thermostat_status: 1

[Assistant] attack


[User] PID: 1400, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: irqbalance, attack: 1

[Assistant] attack


[User] PID: 4375, MINFLT: 2065, MAJFLT: 0, VSTEXT: 148, VSIZE: 17952, RSIZE: 2468, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] PID: 10670, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: dhclient, attack: 0

[Assistant] normal


[User] PID: 3678, MINFLT: 2072, MAJFLT: 0, VSTEXT: 148, VSIZE: 17948, RSIZE: 2608, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.250, src_port: 5353, dst_ip: 224.0.0.251, dst_port: 5353, proto: udp, service: dns, duration: 1.015091, src_bytes: 122, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 178, dst_pkts: 0, dst_ip_bytes: 0, dns_query: _233637de._sub._googlecast._tcp.local, dns_qclass: 1, dns_qtype: 12, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 11043, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <vsftpd>, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 68, dst_ip: 192.168.1.194, dst_port: 68, proto: tcp, service: -, duration: 0.000016, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  13:45:04 , temperature: 22.59832156, pressure: -9.527407765, humidity: 58.89815529

[Assistant] attack


[User] PID: 3793, MINFLT: 0, MAJFLT: 0, VSTEXT: 978, VSIZE: 2.9, RSIZE: 10204, VGROW: 0, RGROW: 0, MEM: 0, CMD: drone

[Assistant] normal


[User] PID: 8179, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <systemd-udev>, attack: 0

[Assistant] normal


[User] PID: 2327, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vmtoolsd, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 62947, dst_ip: 192.168.1.186, dst_port: 10617, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2121, MINFLT: 24, MAJFLT: 0, VSTEXT: 596, VSIZE: 191.7, RSIZE: 8684, VGROW: 0, RGROW: 0, MEM: 0, CMD: apache2

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 1893, dst_ip: 192.168.1.152, dst_port: 1893, proto: tcp, service: -, duration: 0.184381, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 1501, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: accounts-daemo, attack: 0

[Assistant] normal


[User] PID: 2240, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: gsd-xsettings, attack: 1

[Assistant] attack


[User] date: 1-Apr-19, time:  17:22:33 , latitude: 76.34767161, longitude: 88.25607083

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 90.52731765, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.078245154, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 5.555405937, Processor_pct_ C1_Time: 90.52731765, Processor_pct_ Processor_Time: 6.888266691, Processor_C1_ransitions_sec: 223.5593564, Processor_pct_ DPC_Time: 0, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 1.330167619, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 19.94097352, Processor_Interrupts_sec: 408.3390305, Process_Pool_Paged Bytes: 30711216, Process_IO Read_Operations_sec: 7.415236383, Process_Working_Set_ Private: 1240915968, Process_Working_Set_Peak: 5026918400, Process_IO_Write Operations_sec: 8.918324839, Process_Page_File Bytes: 2276192256, Process_pct_ User_Time: 11.11081187, Process_Virtual_Bytes Peak: 2.51E+14, Process_Page_File Bytes Peak: 3084926976, Process_IO_Other_Bytes_sec: 6613.589206, Process_Private_Bytes: 2276192256, Process_IO_Write_Bytes_sec: 9146.193049, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 2.51E+14, Process_pct_ Processor_Time: 199.8381234, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2847200, Process_Working Set: 3355168768, Process_Page Faults_sec: 1302.275838, Process_ID Process: 0, Process_IO Other Operations_sec: 124.5559301, Process_IO Data Operations_sec: 16.33356122, Process_Thread Count: 1411, Process_pct_ Privileged_Time: 188.7273115, Process_IO Data Bytes_sec: 11675.79071, Process_IO Read Bytes_sec: 2529.597666, Process_Priority Base: 0, Process_Handle Count: 51176, Network_I(Intel R _82574L_GNC)TCP_APS: 10601, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 2505.448044, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 140.6890795, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 2646.137124, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 2.605353324, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 4.10844178, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 6.713795103, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 4, Network_I(Intel R _82574L_GNC) Packets Sent sec: 2.605353324, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 4.10844178, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 148267008, Memory Free & Zero Page List Bytes: 1098162176, Memory Cache Bytes Peak: 199274496, Memory System Code Resident Bytes: 0, Memory Available Bytes: 1456242688, Memory Commit Limit: 5770170368, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 763.168112, Memory Available KBytes: 1422112, Memory Pages sec: 0, Memory Cache Bytes: 23973888, Memory Pool Nonpaged Bytes: 100835328, Memory Page Faults sec: 1302.275838, Memory Transition Faults sec: 575.282055, Memory System Cache Resident Bytes: 23973888, Memory Long-Term Average Standby Cache Lifetime (s): 4092, Memory Standby Cache Reserve Bytes: 61300736, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 195022848, Memory System Driver Resident Bytes: 5230592, Memory Standby Cache Normal Priority Bytes: 101756928, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 58.48219641, Memory Free System Page Table Entries: 12263393, Memory Available MBytes: 1388, Memory Modified Page List Bytes: 10670080, Memory Cache Faults sec: 0, Memory Committed Bytes: 3374522368, Memory System Driver Total Bytes: 18079744, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 111923200, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 16969.14286, LogicalDisk(_Total) pct_ Idle Time: 99.94114262, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 81.77882666, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 0.701441279, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.100205897, LogicalDisk(_Total) Free Megabytes: 167371, LogicalDisk(_Total) Avg  Disk sec Write: 0.000292929, LogicalDisk(_Total) Disk Bytes sec: 11902.85728, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.006845512, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000205365, LogicalDisk(_Total) Avg  Disk Queue Length: 0.000205365, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 11902.85728, LogicalDisk(_Total) Disk Transfers sec: 0.701441279, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 16969.14286, LogicalDisk(_Total) pct_ Disk Write Time: 0.006845512, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000292929

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 50076, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.010155, src_bytes: 88, dst_bytes: 370, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 144, dst_pkts: 2, dst_ip_bytes: 426, dns_query: ocsp.sca1b.amazontrust.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 43483, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000416, src_bytes: 0, dst_bytes: 298, conn_state: SHR, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 2, dst_ip_bytes: 354, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 43924, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000109, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 38420, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.01523, src_bytes: 70, dst_bytes: 186, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 126, dst_pkts: 2, dst_ip_bytes: 242, dns_query: fonts.gstatic.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 25-Apr-19, time: 8:29:21, latitude: 55.21431124, longitude: 62.22960409

[Assistant] attack


[User] PID: 3739, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: worer/0:1, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.195, src_port: 58383, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.46832, src_bytes: 39, dst_bytes: 156, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 67, dst_pkts: 1, dst_ip_bytes: 184, dns_query: config.edge.skype.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 1-Apr-19, time:  19:27:17 , current_temperature: 29.86484901, thermostat_status: 1

[Assistant] normal


[User] PID: 4470, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0.02, CMD: tcpdump

[Assistant] normal


[User] PID: 2903, RDDSK: 0, WRDSK: 12, WCANCL: 0, DSK: 0.1, CMD: firefox, attack: 1

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:06, temperature: 35.36813825, pressure: 0.211124126, humidity: 74.00572701

[Assistant] normal


[User] date: 2-Apr-19, time:  04:06:23 , current_temperature: 27.86885047, thermostat_status: 1

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 45261, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.040348, src_bytes: 168, dst_bytes: 3488, conn_state: SF, missed_bytes: 0, src_pkts: 4, src_ip_bytes: 280, dst_pkts: 16, dst_ip_bytes: 3936, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:28, latitude: 2.856855609, longitude: 13.03285966

[Assistant] normal


[User] date: 31-Mar-19, time:    12:40:47   , fridge_temperature: 12.85, temp_condition: high

[Assistant] normal


[User] PID: 3801, RDDSK: 0, WRDSK: 4, WCANCL: 0, DSK: 0.05, CMD: apache2, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 53478, dst_ip: 52.28.231.150, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 60, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 54638, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 16.767051, src_bytes: 45864, dst_bytes: 116174, conn_state: SF, missed_bytes: 0, src_pkts: 1092, src_ip_bytes: 76440, dst_pkts: 517, dst_ip_bytes: 130650, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 59694, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000048, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] Processor_DPC_Rate: 150, Processor_pct_ Idle_Time: 57.10445891, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.078125483, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 15.31259463, Processor_pct_ C1_Time: 57.10445891, Processor_pct_ Processor_Time: 31.87457898, Processor_C1_ransitions_sec: 2891.221222, Processor_pct_ DPC_Time: 2.578140933, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 16.56260236, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 2800.520556, Processor_Interrupts_sec: 6177.345342, Process_Pool_Paged Bytes: 24617072, Process_IO Read_Operations_sec: 0, Process_Working_Set_ Private: 1712668672, Process_Working_Set_Peak: 5970989056, Process_IO_Write Operations_sec: 0.50000367, Process_Page_File Bytes: 4814659584, Process_pct_ User_Time: 30.62518926, Process_Virtual_Bytes Peak: 1.57E+14, Process_Page_File Bytes Peak: 6326329344, Process_IO_Other_Bytes_sec: 5312.938997, Process_Private_Bytes: 4814659584, Process_IO_Write_Bytes_sec: 6603.048466, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.57E+14, Process_pct_ Processor_Time: 194.6887032, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 3155192, Process_Working Set: 1778044928, Process_Page Faults_sec: 15607.41456, Process_ID Process: 0, Process_IO Other Operations_sec: 94.80069584, Process_IO Data Operations_sec: 0.50000367, Process_Thread Count: 1037, Process_pct_ Privileged_Time: 164.0635139, Process_IO Data Bytes_sec: 6603.048466, Process_IO Read Bytes_sec: 0, Process_Priority Base: 0, Process_Handle Count: 39893, Network_I(Intel R _82574L_GNC)TCP_APS: 5439, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4833.135475, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 263.4019334, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5096.537409, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 4.700034498, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 7.00005138, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 11.70008588, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 1, Network_I(Intel R _82574L_GNC) Packets Sent sec: 4.700034498, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 7.00005138, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 105238528, Memory Free & Zero Page List Bytes: 2125824, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 646381568, Memory Commit Limit: 7601770496, Memory Transition Pages RePurposed sec: 3819.928038, Memory Pages Output sec: 1361.809996, Memory Page Reads sec: 1783.213089, Memory Demand Zero Faults sec: 3053.422412, Memory Available KBytes: 631232, Memory Pages sec: 9083.16667, Memory Cache Bytes: 1048576, Memory Pool Nonpaged Bytes: 111034368, Memory Page Faults sec: 15629.81472, Memory Transition Faults sec: 6434.047226, Memory System Cache Resident Bytes: 1048576, Memory Long-Term Average Standby Cache Lifetime (s): 16, Memory Standby Cache Reserve Bytes: 341635072, Memory Page Writes sec: 117.6008632, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 197255168, Memory System Driver Resident Bytes: 1.76E+13, Memory Standby Cache Normal Priority Bytes: 105365504, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 75.76530212, Memory Free System Page Table Entries: 12209562, Memory Available MBytes: 616, Memory Modified Page List Bytes: 290816, Memory Cache Faults sec: 6.400046976, Memory Committed Bytes: 5759504384, Memory System Driver Total Bytes: 18178048, Memory Pages Input sec: 7721.356675, Memory Pool Paged Resident Bytes: 18567168, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 47152.35076, LogicalDisk(_Total) pct_ Idle Time: 71.41462434, LogicalDisk(_Total) Disk Reads sec: 1742.312789, LogicalDisk(_Total) pct_ Free Space: 81.76221398, LogicalDisk(_Total) Disk Read Bytes sec: 32092395.56, LogicalDisk(_Total) Avg  Disk sec Read: 0.000885605, LogicalDisk(_Total) Disk Writes sec: 118.6008705, LogicalDisk(_Total) Current Disk Queue Length: 1, LogicalDisk(_Total) Split IO Sec: 0.300002202, LogicalDisk(_Total) Free Megabytes: 167337, LogicalDisk(_Total) Avg  Disk sec Write: 0.000247555, LogicalDisk(_Total) Disk Bytes sec: 37684705.41, LogicalDisk(_Total) Avg  Disk Read Queue Length: 1.542998546, LogicalDisk(_Total) pct_ Disk Time: 52.41195791, LogicalDisk(_Total) Avg  Disk Bytes Read: 18419.4226, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.029360191, LogicalDisk(_Total) Avg  Disk Queue Length: 1.572358737, LogicalDisk(_Total) pct_ Disk Read Time: 51.43328486, LogicalDisk(_Total) Disk Write Bytes sec: 5592309.848, LogicalDisk(_Total) Disk Transfers sec: 1860.913659, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 20250.64689, LogicalDisk(_Total) pct_ Disk Write Time: 0.978673048, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.00084494

[Assistant] normal


[User] date: 31-Mar-19, time: 12:40:48, temperature: 31.06381436, pressure: 1.693748171, humidity: 95.46189731

[Assistant] normal


[User] PID: 4374, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: atop

[Assistant] normal


[User] PID: 4065, RDDSK: 0, WRDSK: 4, WCANCL: 0, DSK: 0, CMD: atop, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 43166, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000025, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 45884, dst_ip: 192.168.1.152, dst_port: 80, proto: tcp, service: http, duration: 5.145413, src_bytes: 2461, dst_bytes: 1257, conn_state: S3, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 2721, dst_pkts: 4, dst_ip_bytes: 1473, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2835, MINFLT: 0, MAJFLT: 0, VSTEXT: 350, VSIZE: 315.3, RSIZE: 6592, VGROW: 0, RGROW: 0, MEM: 0, CMD: mission-contro

[Assistant] attack


[User] date: 27-Apr-19, time:  05:23:22 , door_state: open, sphone_signal: 1

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:36, motion_status: 1, light_status:  on

[Assistant] normal


[User] src_ip: 192.168.1.37, src_port: 35415, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:44, FC1_Read_Input_Register: 22865, FC2_Read_Discrete_Value: 26160, FC3_Read_Holding_Register: 49273, FC4_Read_Coil: 22981

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 59161, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.770994, src_bytes: 84, dst_bytes: 424, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 140, dst_pkts: 2, dst_ip_bytes: 480, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  03:58:29 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:17, latitude: 0.233663826, longitude: 10.2182243

[Assistant] normal


[User] date: 25-Apr-19, time: 9:12:02, current_temperature: 29.61550642, thermostat_status: 1

[Assistant] attack


[User] PID: 3292, TRUN: 1, TSLPI: 0, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 0, Status: 0, EXC: 0, State: R, CPU: 0.01, CMD: atop

[Assistant] attack


[User] src_ip: 192.168.1.37, src_port: 46029, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 184, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 54772, dst_ip: 192.168.1.49, dst_port: 1152, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1480, TRUN: 0, TSLPI: 17, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: mysqld

[Assistant] attack


[User] PID: 2121, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 0

[Assistant] normal


[User] PID: 1007, MINFLT: 0, MAJFLT: 0, VSTEXT: 129, VSIZE: 16236, RSIZE: 1532, VGROW: 0, RGROW: 0, MEM: 0, CMD: upstart-file-b

[Assistant] attack


[User] date: 31-Mar-19, time: 12:42:48, temperature: 42.93489974, pressure: 0.810176204, humidity: 8.897811103

[Assistant] normal


[User] src_ip: 192.168.1.180, src_port: 45030, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 59, dst_pkts: 0, dst_ip_bytes: 0, dns_query: elasticsearch, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:25, FC1_Read_Input_Register: 2493, FC2_Read_Discrete_Value: 58834, FC3_Read_Holding_Register: 58410, FC4_Read_Coil: 50207

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 34296, dst_ip: 192.168.1.152, dst_port: 10502, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:41, FC1_Read_Input_Register: 14226, FC2_Read_Discrete_Value: 37818, FC3_Read_Holding_Register: 37830, FC4_Read_Coil: 44035

[Assistant] normal


[User] date: 28-Apr-19, time: 21:07:23, motion_status: 1, light_status:  on

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49431, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.000112, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 2405:6e00:10ce:2c00:20c:29ff:feee:e07a, src_port: 13045, dst_ip: 2001:dc3::35, dst_port: 53, proto: udp, service: dns, duration: 0.128304, src_bytes: 41, dst_bytes: 1169, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 89, dst_pkts: 1, dst_ip_bytes: 1217, dns_query: c-msedge.net, dns_qclass: 1, dns_qtype: 43, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:42:27, FC1_Read_Input_Register: 65017, FC2_Read_Discrete_Value: 35530, FC3_Read_Holding_Register: 30128, FC4_Read_Coil: 5781

[Assistant] normal


[User] Processor(_Total) DPC Rate: 50, Processor(_Total) pct_ Idle Time: 32.50517598, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.310559006, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 55.07246377, Processor(_Total) pct_ C1 Time: 26.5010352, Processor(_Total) pct_ Processor Time: 67.49482402, Processor(_Total) C1 Transitions sec: 241.7948973, Processor(_Total) pct_ DPC Time: 0.207039337, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 12.42236025, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 553.8182059, Processor(_Total) Interrupts sec: 779.859699, Process(_Total) Pool Paged Bytes: 10784336, Process(_Total) IO Read Operations sec: 200.7566175, Process(_Total) Working Set - Private: 897949696, Process(_Total) Working Set Peak: 3368439808, Process(_Total) IO Write Operations sec: 217.4366925, Process(_Total) Page File Bytes: 2226495488, Process(_Total) pct_ User Time: 55.07246377, Process(_Total) Virtual Bytes Peak: 13344497664, Process(_Total) Page File Bytes Peak: 2809925632, Process(_Total) IO Other Bytes sec: 11569.88253, Process(_Total) Private Bytes: 2226495488, Process(_Total) IO Write Bytes sec: 1801880.794, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 9433567232, Process(_Total) pct_ Processor Time: 99.48240166, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1295920, Process(_Total) Working Set: 1024798720, Process(_Total) Page Faults sec: 3550.142162, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 533.563829, Process(_Total) IO Data Operations sec: 418.19331, Process(_Total) Thread Count: 660, Process(_Total) pct_ Privileged Time: 44.40993789, Process(_Total) IO Data Bytes sec: 4158360.381, Process(_Total) IO Read Bytes sec: 2356479.587, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 15490, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 5343.845946, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 421.9661841, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 5765.81213, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 5.890978884, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 10.52433306, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 16.41531195, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 5.890978884, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 10.52433306, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 93978624, Memory Free & Zero Page List Bytes: 65536, Memory Cache Bytes Peak: 52883456, Memory System Code Resident Bytes: 909312, Memory Available Bytes: 111980544, Memory Commit Limit: 5204623360, Memory Transition Pages RePurposed sec: 2932.714623, Memory Pages Output sec: 719.5599039, Memory Page Reads sec: 542.1024389, Memory Demand Zero Faults sec: 2729.972282, Memory Available KBytes: 109356, Memory Pages sec: 3080.45243, Memory Cache Bytes: 2957312, Memory Pool Nonpaged Bytes: 59588608, Memory Page Faults sec: 4342.114773, Memory Transition Faults sec: 511.3899197, Memory System Cache Resident Bytes: 2957312, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 14.03244408, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 62894080, Memory System Driver Resident Bytes: 1482752, Memory Standby Cache Normal Priority Bytes: 49020928, Memory Pool Paged Allocs: 63379, Memory Pool Nonpaged Allocs: 61648, Memory pct_ Committed Bytes In Use: 53.64361828, Memory Free System Page Table Entries: 33558136, Memory Available MBytes: 106, Memory Modified Page List Bytes: 4427776, Memory Cache Faults sec: 593.7312426, Memory Committed Bytes: 2791948288, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 2360.892526, Memory Pool Paged Resident Bytes: 20164608, Memory Write Copies sec: 0

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 45460, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 21.938886, src_bytes: 3595, dst_bytes: 1649, conn_state: SF, missed_bytes: 0, src_pkts: 8, src_ip_bytes: 4019, dst_pkts: 6, dst_ip_bytes: 1969, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 26-Apr-19, time: 14:58:11, door_state: closed, sphone_signal: 0

[Assistant] attack


[User] PID: 1400, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: irqbalance, attack: 0

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:27, temperature: 34.93664279, pressure: 1.473622496, humidity: 27.58702799

[Assistant] normal


[User] PID: 4401, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: N, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 59012, dst_ip: 151.101.192.233, dst_port: 443, proto: tcp, service: ssl, duration: 6.181352, src_bytes: 314, dst_bytes: 6454, conn_state: SF, missed_bytes: 0, src_pkts: 15, src_ip_bytes: 1066, dst_pkts: 11, dst_ip_bytes: 7034, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2498, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: upstart-dbus-b

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 88, dst_ip: 192.168.1.152, dst_port: 88, proto: tcp, service: -, duration: 0.000032, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 4287, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: smtpd, attack: 1

[Assistant] attack


[User] date: 28-Apr-19, time:  11:23:17 , FC1_Read_Input_Register: 27271, FC2_Read_Discrete_Value: 48076, FC3_Read_Holding_Register: 28028, FC4_Read_Coil: 11330

[Assistant] attack


[User] src_ip: 192.168.1.195, src_port: 1380, dst_ip: 192.168.1.195, dst_port: 1380, proto: tcp, service: -, duration: 0.187708, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 25-Apr-19, time:  16:21:09 , latitude: 52.75080633, longitude: 63.26825918

[Assistant] attack


[User] src_ip: 192.168.1.33, src_port: 4444, dst_ip: 192.168.1.193, dst_port: 49235, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 1500, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2498, MINFLT: 0, MAJFLT: 0, VSTEXT: 121, VSIZE: 22412, RSIZE: 464, VGROW: 0, RGROW: 0, MEM: 0, CMD: upstart-dbus-b

[Assistant] normal


[User] date: 25-Apr-19, time: 8:23:15, motion_status: 0, light_status:  off

[Assistant] attack


[User] date: 25-Apr-19, time:  16:33:10 , motion_status: 0, light_status:  off

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:08, FC1_Read_Input_Register: 7525, FC2_Read_Discrete_Value: 24095, FC3_Read_Holding_Register: 7067, FC4_Read_Coil: 37863

[Assistant] normal


[User] PID: 1447, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 1, PRI: 121, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: rtkit-daemon

[Assistant] attack


[User] src_ip: 2405:6e00:10ce:2c00:20c:29ff:feee:e07a, src_port: 34801, dst_ip: 2620:0:32::53, dst_port: 53, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 99, dst_pkts: 0, dst_ip_bytes: 0, dns_query: iecvlist.microsoft.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 3119, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 10, PRI: 130, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: update-manager

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 59484, dst_ip: 104.16.163.13, dst_port: 443, proto: tcp, service: ssl, duration: 180.936633, src_bytes: 1037, dst_bytes: 4706, conn_state: SF, missed_bytes: 0, src_pkts: 20, src_ip_bytes: 1869, dst_pkts: 19, dst_ip_bytes: 5516, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 6452, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 1, Status: 0, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] attack


[User] PID: 2882, MINFLT: 0, MAJFLT: 0, VSTEXT: 36, VSIZE: 381.1, RSIZE: 16928, VGROW: 0, RGROW: 0, MEM: 0, CMD: vmtoolsd

[Assistant] attack


[User] PID: 1401, MINFLT: 3, MAJFLT: 0, VSTEXT: 36, VSIZE: 19296, RSIZE: 824, VGROW: 0, RGROW: 0, MEM: 0, CMD: irqbalance

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 39694, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.003643, src_bytes: 86, dst_bytes: 162, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 142, dst_pkts: 2, dst_ip_bytes: 218, dns_query: links.services.disqus.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 57441, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000024, src_bytes: 90, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 146, dst_pkts: 0, dst_ip_bytes: 0, dns_query: safebrowsing.googleapis.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] Processor(_Total) DPC Rate: 0, Processor(_Total) pct_ Idle Time: 94.16666667, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.052083333, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 5.520833333, Processor(_Total) pct_ C1 Time: 93.33333333, Processor(_Total) pct_ Processor Time: 5.833333333, Processor(_Total) C1 Transitions sec: 308.1312565, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 0.3125, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 16.66655433, Processor(_Total) Interrupts sec: 220.1318496, Process(_Total) Pool Paged Bytes: 10215272, Process(_Total) IO Read Operations sec: 9.399936644, Process(_Total) Working Set - Private: 2446417920, Process(_Total) Working Set Peak: 3647311872, Process(_Total) IO Write Operations sec: 6.066625778, Process(_Total) Page File Bytes: 3285479424, Process(_Total) pct_ User Time: 11.04166667, Process(_Total) Virtual Bytes Peak: 10583564288, Process(_Total) Page File Bytes Peak: 3625992192, Process(_Total) IO Other Bytes sec: 7243.417846, Process(_Total) Private Bytes: 3285479424, Process(_Total) IO Write Bytes sec: 10018.46581, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 9344323584, Process(_Total) pct_ Processor Time: 199.8958333, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1494872, Process(_Total) Working Set: 2582683648, Process(_Total) Page Faults sec: 669.0621572, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 294.5313482, Process(_Total) IO Data Operations sec: 15.46656242, Process(_Total) Thread Count: 640, Process(_Total) pct_ Privileged Time: 188.8541667, Process(_Total) IO Data Bytes sec: 19166.67082, Process(_Total) IO Read Bytes sec: 9148.205008, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 16602, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 2974.446619, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 475.3967958, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 3449.843415, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 7.333283907, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 8.99993934, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 16.33322325, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 7.333283907, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 8.99993934, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 99926016, Memory Free & Zero Page List Bytes: 126648320, Memory Cache Bytes Peak: 139370496, Memory System Code Resident Bytes: 28672, Memory Available Bytes: 204414976, Memory Commit Limit: 6070345728, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 2.199985172, Memory Demand Zero Faults sec: 716.6618364, Memory Available KBytes: 199624, Memory Pages sec: 2.866647345, Memory Cache Bytes: 3616768, Memory Pool Nonpaged Bytes: 70545408, Memory Page Faults sec: 821.6611287, Memory Transition Faults sec: 100.932653, Memory System Cache Resident Bytes: 3616768, Memory Standby Cache Reserve Bytes: 8204288, Memory Page Writes sec: 0, Memory System Code Total Bytes: 4370432, Memory Standby Cache Core Bytes: 64065536, Memory System Driver Resident Bytes: 2621440, Memory Standby Cache Normal Priority Bytes: 5496832, Memory Pool Paged Allocs: 63087, Memory Pool Nonpaged Allocs: 65359, Memory pct_ Committed Bytes In Use: 61.81868236, Memory Free System Page Table Entries: 33556544, Memory Available MBytes: 194, Memory Modified Page List Bytes: 2834432, Memory Cache Faults sec: 5.399963604, Memory Committed Bytes: 3752607744, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 2.866647345, Memory Pool Paged Resident Bytes: 28205056, Memory Write Copies sec: 7.733281211

[Assistant] attack


[User] PID: 2782, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: 0, EXC: 0, State: S, CPU: 0, CMD: ibus-engine-si

[Assistant] attack


[User] PID: 10409, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vsftpd, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 50947, dst_ip: 192.168.1.186, dst_port: 6101, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 75, dst_ip: 192.168.1.184, dst_port: 75, proto: tcp, service: -, duration: 0.000168, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 47571, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000031, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 84.36694653, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 6.697775648, Processor_pct_ C1_Time: 84.36694653, Processor_pct_ Processor_Time: 13.0846788, Processor_C1_ransitions_sec: 116.265245, Processor_pct_ DPC_Time: 0, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 6.542013423, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 21.50110695, Processor_Interrupts_sec: 380.3506002, Process_Pool_Paged Bytes: 30796352, Process_IO Read_Operations_sec: 10.75055347, Process_Working_Set_ Private: 830214144, Process_Working_Set_Peak: 4654116864, Process_IO_Write Operations_sec: 10.55146915, Process_Page_File Bytes: 1858170880, Process_pct_ User_Time: 13.3955513, Process_Virtual_Bytes Peak: 2.58E+14, Process_Page_File Bytes Peak: 2686287872, Process_IO_Other_Bytes_sec: 6909.22145, Process_Private_Bytes: 1858170880, Process_IO_Write_Bytes_sec: 2779.81441, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 2.58E+14, Process_pct_ Processor_Time: 200.7775072, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2727752, Process_Working Set: 2993291264, Process_Page Faults_sec: 1452.320141, Process_ID Process: 0, Process_IO Other Operations_sec: 137.5672676, Process_IO Data Operations_sec: 21.30202263, Process_Thread Count: 1454, Process_pct_ Privileged_Time: 187.3819559, Process_IO Data Bytes_sec: 5599.64477, Process_IO Read Bytes_sec: 2819.830359, Process_Priority Base: 0, Process_Handle Count: 51700, Network_I(Intel R _82574L_GNC)TCP_APS: 10927, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 2596.557291, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 154.6885194, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 2751.24581, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 2.886722692, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 5.574361061, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 8.461083753, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 3, Network_I(Intel R _82574L_GNC) Packets Sent sec: 2.886722692, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 5.574361061, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 126210048, Memory Free & Zero Page List Bytes: 288169984, Memory Cache Bytes Peak: 199274496, Memory System Code Resident Bytes: 0, Memory Available Bytes: 754212864, Memory Commit Limit: 5770170368, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 901.5533594, Memory Available KBytes: 736536, Memory Pages sec: 0, Memory Cache Bytes: 132919296, Memory Pool Nonpaged Bytes: 95461376, Memory Page Faults sec: 1452.320141, Memory Transition Faults sec: 589.986393, Memory System Cache Resident Bytes: 132919296, Memory Long-Term Average Standby Cache Lifetime (s): 1929, Memory Standby Cache Reserve Bytes: 96833536, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 185438208, Memory System Driver Resident Bytes: 7241728, Memory Standby Cache Normal Priority Bytes: 183771136, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 68.06641143, Memory Free System Page Table Entries: 12263371, Memory Available MBytes: 719, Memory Modified Page List Bytes: 17301504, Memory Cache Faults sec: 0, Memory Committed Bytes: 3927547904, Memory System Driver Total Bytes: 18079744, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 105504768, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 0, LogicalDisk(_Total) pct_ Idle Time: 100.1469339, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 81.80667732, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 0, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 167428, LogicalDisk(_Total) Avg  Disk sec Write: 0, LogicalDisk(_Total) Disk Bytes sec: 0, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0, LogicalDisk(_Total) Avg  Disk Queue Length: 0, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 0, LogicalDisk(_Total) Disk Transfers sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 0, LogicalDisk(_Total) pct_ Disk Write Time: 0, LogicalDisk(_Total) Avg  Disk sec Transfer: 0

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 39438, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.001363, src_bytes: 153, dst_bytes: 543, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 421, dst_pkts: 5, dst_ip_bytes: 811, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1257, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: getty

[Assistant] normal


[User] PID: 1960, TRUN: 0, TSLPI: 2, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: Xorg

[Assistant] attack


[User] src_ip: 192.168.1.195, src_port: 64732, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 75, dst_pkts: 0, dst_ip_bytes: 0, dns_query: v10.events.data.microsoft.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.33, src_port: 40823, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 1136, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 25-Apr-19, time: 8:56:01, temperature: 36.28725365, pressure: 1.610420536, humidity: 84.51911814

[Assistant] attack


[User] PID: 3897, RDDSK: 0, WRDSK: 16, WCANCL: 0, DSK: 0.15, CMD: atop, attack: 0

[Assistant] normal


[User] PID: 3031, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 43032, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000026, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 6308, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: N, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] PID: 1404, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: whoopsie, attack: 0

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 64.90756729, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 31.87614244, Processor_pct_ C1_Time: 64.90756729, Processor_pct_ Processor_Time: 34.06013672, Processor_C1_ransitions_sec: 124.504832, Processor_pct_ DPC_Time: 0.0781278, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 2.187578403, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 36.90143214, Processor_Interrupts_sec: 662.225701, Process_Pool_Paged Bytes: 22064128, Process_IO Read_Operations_sec: 0, Process_Working_Set_ Private: 1791758336, Process_Working_Set_Peak: 6025867264, Process_IO_Write Operations_sec: 0.100003881, Process_Page_File Bytes: 3771744256, Process_pct_ User_Time: 63.75228488, Process_Virtual_Bytes Peak: 1.52E+14, Process_Page_File Bytes Peak: 4800573440, Process_IO_Other_Bytes_sec: 3080.619559, Process_Private_Bytes: 3771744256, Process_IO_Write_Bytes_sec: 819.2317944, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.52E+14, Process_pct_ Processor_Time: 199.8509127, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2578528, Process_Working Set: 1892413440, Process_Page Faults_sec: 1220.447366, Process_ID Process: 0, Process_IO Other Operations_sec: 46.50180474, Process_IO Data Operations_sec: 0.100003881, Process_Thread Count: 981, Process_pct_ Privileged_Time: 136.0986278, Process_IO Data Bytes_sec: 819.2317944, Process_IO Read Bytes_sec: 0, Process_Priority Base: 0, Process_Handle Count: 38712, Network_I(Intel R _82574L_GNC)TCP_APS: 5169, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4986.59353, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 265.6103083, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5252.203838, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 4.800186295, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 8.400326017, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 13.20051231, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 3, Network_I(Intel R _82574L_GNC) Packets Sent sec: 4.800186295, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 8.400326017, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 103342080, Memory Free & Zero Page List Bytes: 14499840, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 538120192, Memory Commit Limit: 8473018368, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 1.800069861, Memory Demand Zero Faults sec: 793.8308086, Memory Available KBytes: 525508, Memory Pages sec: 14.40055889, Memory Cache Bytes: 782336, Memory Pool Nonpaged Bytes: 100503552, Memory Page Faults sec: 1233.94789, Memory Transition Faults sec: 522.3202712, Memory System Cache Resident Bytes: 782336, Memory Long-Term Average Standby Cache Lifetime (s): 137, Memory Standby Cache Reserve Bytes: 204226560, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 223686656, Memory System Driver Resident Bytes: 1.76E+13, Memory Standby Cache Normal Priority Bytes: 95707136, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 54.39247066, Memory Free System Page Table Entries: 12210165, Memory Available MBytes: 513, Memory Modified Page List Bytes: 12480512, Memory Cache Faults sec: 0.100003881, Memory Committed Bytes: 4608684032, Memory System Driver Total Bytes: 18223104, Memory Pages Input sec: 14.40055889, Memory Pool Paged Resident Bytes: 27910144, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 8601.6, LogicalDisk(_Total) pct_ Idle Time: 99.94789113, LogicalDisk(_Total) Disk Reads sec: 1.800069861, LogicalDisk(_Total) pct_ Free Space: 81.29217299, LogicalDisk(_Total) Disk Read Bytes sec: 58984.6892, LogicalDisk(_Total) Avg  Disk sec Read: 0.000562406, LogicalDisk(_Total) Disk Writes sec: 1.000038812, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.100003881, LogicalDisk(_Total) Free Megabytes: 166375, LogicalDisk(_Total) Avg  Disk sec Write: 0.00054175, LogicalDisk(_Total) Disk Bytes sec: 67586.62304, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.001012366, LogicalDisk(_Total) pct_ Disk Time: 0.051804857, LogicalDisk(_Total) Avg  Disk Bytes Read: 32768, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000541769, LogicalDisk(_Total) Avg  Disk Queue Length: 0.001554136, LogicalDisk(_Total) pct_ Disk Read Time: 0.033745209, LogicalDisk(_Total) Disk Write Bytes sec: 8601.933841, LogicalDisk(_Total) Disk Transfers sec: 2.800108672, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 24137.14286, LogicalDisk(_Total) pct_ Disk Write Time: 0.018059647, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000555029

[Assistant] normal


[User] PID: 2618, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: unity-panel-se

[Assistant] attack


[User] PID: 4373, MINFLT: 2075, MAJFLT: 0, VSTEXT: 148, VSIZE: 17644, RSIZE: 2428, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] date: 31-Mar-19, time: 12:42:36, temperature: 46.78770462, pressure: -0.117924998, humidity: 62.77709416

[Assistant] normal


[User] date: 23-Apr-19, time:  20:44:42 , FC1_Read_Input_Register: 13281, FC2_Read_Discrete_Value: 25196, FC3_Read_Holding_Register: 24423, FC4_Read_Coil: 20362

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:15, temperature: 25.38870932, pressure: 1.035, humidity: 62.74162944

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49158, dst_ip: 192.168.1.33, dst_port: 7870, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 984, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2533, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: hud-service

[Assistant] normal


[User] PID: 10954, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] PID: 2311, TRUN: 0, TSLPI: 11, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: gnome-shell

[Assistant] attack


[User] Processor_DPC_Rate: 4, Processor_pct_ Idle_Time: 87.37776772, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.078248572, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 6.181637165, Processor_pct_ C1_Time: 87.37776772, Processor_pct_ Processor_Time: 10.32713682, Processor_C1_ransitions_sec: 473.1496062, Processor_pct_ DPC_Time: 0.704237145, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 4.147174301, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 224.054968, Processor_Interrupts_sec: 647.6260274, Process_Pool_Paged Bytes: 30596224, Process_IO Read_Operations_sec: 11.2177722, Process_Working_Set_ Private: 1734307840, Process_Working_Set_Peak: 6056374272, Process_IO_Write Operations_sec: 13.52142185, Process_Page_File Bytes: 3251507200, Process_pct_ User_Time: 12.36327433, Process_Virtual_Bytes Peak: 2.49E+14, Process_Page_File Bytes Peak: 4388286464, Process_IO_Other_Bytes_sec: 4547.805042, Process_Private_Bytes: 3251507200, Process_IO_Write_Bytes_sec: 124141.4761, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 2.49E+14, Process_pct_ Processor_Time: 198.4383779, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2916264, Process_Working Set: 2928812032, Process_Page Faults_sec: 1240.465257, Process_ID Process: 0, Process_IO Other Operations_sec: 106.3685186, Process_IO Data Operations_sec: 24.73919406, Process_Thread Count: 1419, Process_pct_ Privileged_Time: 186.0751035, Process_IO Data Bytes_sec: 126938.7077, Process_IO Read Bytes_sec: 2797.231626, Process_Priority Base: 0, Process_Handle Count: 51566, Network_I(Intel R _82574L_GNC)TCP_APS: 9935, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 15992.03602, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 173.0741997, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 16165.11022, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 3.205077773, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 214.339576, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 217.5446538, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 1, Network_I(Intel R _82574L_GNC) Packets Sent sec: 3.205077773, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 214.339576, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 145215488, Memory Free & Zero Page List Bytes: 327843840, Memory Cache Bytes Peak: 199274496, Memory System Code Resident Bytes: 0, Memory Available Bytes: 656027648, Memory Commit Limit: 6267076608, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 683.2825177, Memory Available KBytes: 640652, Memory Pages sec: 0, Memory Cache Bytes: 16314368, Memory Pool Nonpaged Bytes: 104914944, Memory Page Faults sec: 1240.565415, Memory Transition Faults sec: 593.6404987, Memory System Cache Resident Bytes: 16314368, Memory Long-Term Average Standby Cache Lifetime (s): 6380, Memory Standby Cache Reserve Bytes: 3444736, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 245886976, Memory System Driver Resident Bytes: 5042176, Memory Standby Cache Normal Priority Bytes: 78852096, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 79.10875997, Memory Free System Page Table Entries: 12263432, Memory Available MBytes: 625, Memory Modified Page List Bytes: 966656, Memory Cache Faults sec: 0, Memory Committed Bytes: 4957806592, Memory System Driver Total Bytes: 18079744, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 80605184, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 37225.41176, LogicalDisk(_Total) pct_ Idle Time: 99.77105244, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 81.425563, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 3.405395133, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 166648, LogicalDisk(_Total) Avg  Disk sec Write: 0.002012674, LogicalDisk(_Total) Disk Bytes sec: 126767.2361, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.228463795, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.006853914, LogicalDisk(_Total) Avg  Disk Queue Length: 0.006853914, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 126767.2361, LogicalDisk(_Total) Disk Transfers sec: 3.405395133, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 37225.41176, LogicalDisk(_Total) pct_ Disk Write Time: 0.228463795, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.002012674

[Assistant] attack


[User] src_ip: 172.17.0.8, src_port: 58924, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.003556, src_bytes: 0, dst_bytes: 212, conn_state: SHR, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 2, dst_ip_bytes: 268, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal