[User] Processor(_Total) DPC Rate: 59, Processor(_Total) pct_ Idle Time: 74.89583333, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.104166667, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 2.083333333, Processor(_Total) pct_ C1 Time: 73.33333333, Processor(_Total) pct_ Processor Time: 25.10416667, Processor(_Total) C1 Transitions sec: 2279.6016, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 23.02083333, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 2125.530319, Processor(_Total) Interrupts sec: 3521.838801, Process(_Total) Pool Paged Bytes: 7904232, Process(_Total) IO Read Operations sec: 131.2705978, Process(_Total) Working Set - Private: 792064000, Process(_Total) Working Set Peak: 2008670208, Process(_Total) IO Write Operations sec: 129.0705319, Process(_Total) Page File Bytes: 2237870080, Process(_Total) pct_ User Time: 2.083333333, Process(_Total) Virtual Bytes Peak: 7990702080, Process(_Total) Page File Bytes Peak: 2603380736, Process(_Total) IO Other Bytes sec: 4650.93928, Process(_Total) Private Bytes: 2237870080, Process(_Total) IO Write Bytes sec: 31510.47697, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6939553792, Process(_Total) pct_ Processor Time: 98.85416667, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1100952, Process(_Total) Working Set: 858116096, Process(_Total) Page Faults sec: 2383.938058, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 248.3407703, Process(_Total) IO Data Operations sec: 260.3411297, Process(_Total) Thread Count: 566, Process(_Total) pct_ Privileged Time: 96.77083333, Process(_Total) IO Data Bytes sec: 58680.62396, Process(_Total) IO Read Bytes sec: 27170.14699, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13634, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 173.9385422, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 89.13600266, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 263.0745449, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 1.200035937, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 1.933391232, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 3.133427169, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 1.200035937, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 1.933391232, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 91058176, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 1679360, Memory Available Bytes: 4153344, Memory Commit Limit: 2901925888, Memory Transition Pages RePurposed sec: 4489.801121, Memory Pages Output sec: 2530.409111, Memory Page Reads sec: 1744.652247, Memory Demand Zero Faults sec: 113.6700707, Memory Available KBytes: 4056, Memory Pages sec: 8181.044995, Memory Cache Bytes: 638976, Memory Pool Nonpaged Bytes: 52793344, Memory Page Faults sec: 2715.948, Memory Transition Faults sec: 882.6264317, Memory System Cache Resident Bytes: 638976, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 633.2856315, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 512000, Memory System Driver Resident Bytes: 1576960, Memory Standby Cache Normal Priority Bytes: 3641344, Memory Pool Paged Allocs: 59067, Memory Pool Nonpaged Allocs: 51985, Memory pct_ Committed Bytes In Use: 89.30679569, Memory Free System Page Table Entries: 33562138, Memory Available MBytes: 3, Memory Modified Page List Bytes: 45056, Memory Cache Faults sec: 3.800113801, Memory Committed Bytes: 2591617024, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 5650.635884, Memory Pool Paged Resident Bytes: 16093184, Memory Write Copies sec: 10.80032343

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 42378, dst_ip: 192.168.1.152, dst_port: 21, proto: tcp, service: -, duration: 0.000462, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 60, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:18, FC1_Read_Input_Register: 11777, FC2_Read_Discrete_Value: 38310, FC3_Read_Holding_Register: 32090, FC4_Read_Coil: 619

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:23, latitude: 2.016775182, longitude: 11.59440384

[Assistant] normal


[User] PID: 3676, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 83, dst_ip: 192.168.1.190, dst_port: 83, proto: tcp, service: -, duration: 0.000006, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.190, src_port: 1434, dst_ip: 192.168.1.190, dst_port: 1434, proto: tcp, service: -, duration: 0.217542, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.194, src_port: 80, dst_ip: 192.168.1.194, dst_port: 1686, proto: tcp, service: -, duration: 0.164424, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 4032, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: kworker/u256:0

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 61.99003459, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 29.99960491, Processor_pct_ C1_Time: 61.99003459, Processor_pct_ Processor_Time: 37.11020326, Processor_C1_ransitions_sec: 248.4949282, Processor_pct_ DPC_Time: 0.234371913, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 7.109281371, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 79.0983856, Processor_Interrupts_sec: 1490.769573, Process_Pool_Paged Bytes: 22710480, Process_IO Read_Operations_sec: 3.599926525, Process_Working_Set_ Private: 2071756800, Process_Working_Set_Peak: 6357639168, Process_IO_Write Operations_sec: 0, Process_Page_File Bytes: 4112318464, Process_pct_ User_Time: 59.99920981, Process_Virtual_Bytes Peak: 1.59E+14, Process_Page_File Bytes Peak: 5185527808, Process_IO_Other_Bytes_sec: 5551.286698, Process_Private_Bytes: 4112318464, Process_IO_Write_Bytes_sec: 0, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.59E+14, Process_pct_ Processor_Time: 199.5286222, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2744256, Process_Working Set: 2142568448, Process_Page Faults_sec: 1720.464885, Process_ID Process: 0, Process_IO Other Operations_sec: 93.29809579, Process_IO Data Operations_sec: 3.599926525, Process_Thread Count: 1053, Process_pct_ Privileged_Time: 139.5294124, Process_IO Data Bytes_sec: 924.9811211, Process_IO Read Bytes_sec: 924.9811211, Process_Priority Base: 0, Process_Handle Count: 40720, Network_I(Intel R _82574L_GNC)TCP_APS: 5569, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4920.999562, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 263.3946241, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5184.394187, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 4.899899993, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 7.799840805, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 12.6997408, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 1, Network_I(Intel R _82574L_GNC) Packets Sent sec: 4.899899993, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 7.799840805, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 139313152, Memory Free & Zero Page List Bytes: 528384, Memory Cache Bytes Peak: 157425664, Memory System Code Resident Bytes: 0, Memory Available Bytes: 307658752, Memory Commit Limit: 8459431936, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 259.9946935, Memory Page Reads sec: 52.79892237, Memory Demand Zero Faults sec: 1191.07569, Memory Available KBytes: 300448, Memory Pages sec: 599.0877726, Memory Cache Bytes: 729088, Memory Pool Nonpaged Bytes: 121163776, Memory Page Faults sec: 2073.157687, Memory Transition Faults sec: 838.1828927, Memory System Cache Resident Bytes: 729088, Memory Long-Term Average Standby Cache Lifetime (s): 84, Memory Standby Cache Reserve Bytes: 50036736, Memory Page Writes sec: 13.29972855, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 197328896, Memory System Driver Resident Bytes: 1.76E+13, Memory Standby Cache Normal Priority Bytes: 59756544, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 59.55417418, Memory Free System Page Table Entries: 12213483, Memory Available MBytes: 293, Memory Modified Page List Bytes: 397312, Memory Cache Faults sec: 1.799963263, Memory Committed Bytes: 5037944832, Memory System Driver Total Bytes: 18264064, Memory Pages Input sec: 339.0930791, Memory Pool Paged Resident Bytes: 24907776, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 80072.18045, LogicalDisk(_Total) pct_ Idle Time: 99.46355906, LogicalDisk(_Total) Disk Reads sec: 46.79904483, LogicalDisk(_Total) pct_ Free Space: 81.02099549, LogicalDisk(_Total) Disk Read Bytes sec: 1469307.611, LogicalDisk(_Total) Avg  Disk sec Read: 0.000414512, LogicalDisk(_Total) Disk Writes sec: 13.29972855, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 165820, LogicalDisk(_Total) Avg  Disk sec Write: 0.000376424, LogicalDisk(_Total) Disk Bytes sec: 2534245.876, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.019398915, LogicalDisk(_Total) pct_ Disk Time: 0.813509286, LogicalDisk(_Total) Avg  Disk Bytes Read: 31396.10256, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.005006374, LogicalDisk(_Total) Avg  Disk Queue Length: 0.024405289, LogicalDisk(_Total) pct_ Disk Read Time: 0.646630484, LogicalDisk(_Total) Disk Write Bytes sec: 1064938.265, LogicalDisk(_Total) Disk Transfers sec: 60.09877338, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 42168.01331, LogicalDisk(_Total) pct_ Disk Write Time: 0.166878802, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000406083

[Assistant] normal


[User] date: 31-Mar-19, time: 12:42:13, FC1_Read_Input_Register: 33941, FC2_Read_Discrete_Value: 49270, FC3_Read_Holding_Register: 40202, FC4_Read_Coil: 35437

[Assistant] normal


[User] date: 31-Mar-19, time:    12:43:35   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] PID: 4375, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 53922, dst_ip: 192.168.1.103, dst_port: 1154, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 1-Apr-19, time:  19:04:54 , current_temperature: 26.69687179, thermostat_status: 1

[Assistant] normal


[User] PID: 3485, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 5, Status: -, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] date: 25-Apr-19, time:  09:38:45 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] PID: 4532, TRUN: 0, TSLPI: 0, TSLPU: 1, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: 0, EXC: 0, State: D, CPU: 0, CMD: apache2

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49938, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000057, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 90.13616889, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 8.12490372, Processor_pct_ C1_Time: 90.13616889, Processor_pct_ Processor_Time: 8.907329448, Processor_C1_ransitions_sec: 153.4975011, Processor_pct_ DPC_Time: 0, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 0.781240742, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 19.89967603, Processor_Interrupts_sec: 350.8942874, Process_Pool_Paged Bytes: 20107616, Process_IO Read_Operations_sec: 2.199964185, Process_Working_Set_ Private: 619106304, Process_Working_Set_Peak: 4269641728, Process_IO_Write Operations_sec: 1.299978836, Process_Page_File Bytes: 1567580160, Process_pct_ User_Time: 16.24980744, Process_Virtual_Bytes Peak: 1.44E+14, Process_Page_File Bytes Peak: 2590433280, Process_IO_Other_Bytes_sec: 5438.611459, Process_Private_Bytes: 1567580160, Process_IO_Write_Bytes_sec: 6709.890763, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.44E+14, Process_pct_ Processor_Time: 199.99763, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 1859128, Process_Working Set: 1078747136, Process_Page Faults_sec: 335.5945365, Process_ID Process: 0, Process_IO Other Operations_sec: 105.4982825, Process_IO Data Operations_sec: 3.499943021, Process_Thread Count: 907, Process_pct_ Privileged_Time: 183.7478226, Process_IO Data Bytes_sec: 6955.886758, Process_IO Read Bytes_sec: 245.9959952, Process_Priority Base: 0, Process_Handle Count: 36458, Network_I(Intel R _82574L_GNC)TCP_APS: 5838, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4741.222813, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 248.3959561, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 4989.618769, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 4.599925113, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 6.199899066, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 10.79982418, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 7, Network_I(Intel R _82574L_GNC) Packets Sent sec: 4.599925113, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 6.199899066, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 201662464, Memory Free & Zero Page List Bytes: 294260736, Memory Cache Bytes Peak: 157425664, Memory System Code Resident Bytes: 0, Memory Available Bytes: 875909120, Memory Commit Limit: 8459431936, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 371.8939456, Memory Available KBytes: 855380, Memory Pages sec: 0, Memory Cache Bytes: 31584256, Memory Pool Nonpaged Bytes: 123551744, Memory Page Faults sec: 335.5945365, Memory Transition Faults sec: 15.69974441, Memory System Cache Resident Bytes: 31584256, Memory Long-Term Average Standby Cache Lifetime (s): 35, Memory Standby Cache Reserve Bytes: 229888000, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 165449728, Memory System Driver Resident Bytes: 3899392, Memory Standby Cache Normal Priority Bytes: 186310656, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 36.06697555, Memory Free System Page Table Entries: 12213919, Memory Available MBytes: 835, Memory Modified Page List Bytes: 18763776, Memory Cache Faults sec: 0, Memory Committed Bytes: 3051061248, Memory System Driver Total Bytes: 18259968, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 161349632, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 14628.57143, LogicalDisk(_Total) pct_ Idle Time: 99.98881513, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 81.04835754, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 0.699988604, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.099998372, LogicalDisk(_Total) Free Megabytes: 165876, LogicalDisk(_Total) Avg  Disk sec Write: 0.000496429, LogicalDisk(_Total) Disk Bytes sec: 10239.8333, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.011582863, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000347496, LogicalDisk(_Total) Avg  Disk Queue Length: 0.000347496, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 10239.8333, LogicalDisk(_Total) Disk Transfers sec: 0.699988604, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 14628.57143, LogicalDisk(_Total) pct_ Disk Write Time: 0.011583863, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000496429

[Assistant] normal


[User] src_ip: 192.168.1.133, src_port: 5353, dst_ip: 224.0.0.251, dst_port: 5353, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 89, dst_pkts: 0, dst_ip_bytes: 0, dns_query: _233637de._sub._googlecast._tcp.local, dns_qclass: 1, dns_qtype: 12, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 2122, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 0

[Assistant] normal


[User] PID: 2311, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: gnome-shell, attack: 1

[Assistant] attack


[User] PID: 5721, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 5, Status: -, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 41160, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.012874, src_bytes: 74, dst_bytes: 304, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 130, dst_pkts: 2, dst_ip_bytes: 360, dns_query: referrer.disqus.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2576, MINFLT: 0, MAJFLT: 0, VSTEXT: 121, VSIZE: 22308, RSIZE: 640, VGROW: 0, RGROW: 0, MEM: 0, CMD: upstart-dbus-b

[Assistant] attack


[User] date: 31-Mar-19, time: 12:40:21, motion_status: 1, light_status:  on

[Assistant] normal


[User] date: 25-Apr-19, time:  16:06:22 , latitude: 45.08806443, longitude: 55.16733709

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:21, FC1_Read_Input_Register: 137, FC2_Read_Discrete_Value: 17254, FC3_Read_Holding_Register: 7689, FC4_Read_Coil: 17773

[Assistant] normal


[User] PID: 11317, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vsftpd, attack: 0

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:37, temperature: 36.3757525, pressure: 0.757691711, humidity: 31.60969032

[Assistant] normal


[User] src_ip: 2405:6e00:10ce:2c00:20c:29ff:feee:e07a, src_port: 43313, dst_ip: 2001:500:2d::d, dst_port: 53, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 85, dst_pkts: 0, dst_ip_bytes: 0, dns_query: wpad.hub, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 62949, dst_ip: 192.168.1.250, dst_port: 406, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 49686, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 0.038805, src_bytes: 155, dst_bytes: 978, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 375, dst_pkts: 4, dst_ip_bytes: 1150, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  05:05:07 , latitude: 38.75600098, longitude: 49.12335627

[Assistant] attack


[User] PID: 1371, MINFLT: 5, MAJFLT: 0, VSTEXT: 36, VSIZE: 19296, RSIZE: 640, VGROW: 0, RGROW: 12, MEM: 0, CMD: irqbalance

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:53, current_temperature: 31.82262941, thermostat_status: 1

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 78, dst_ip: 192.168.1.152, dst_port: 78, proto: tcp, service: -, duration: 0.000002, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 4470, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0.02, CMD: tcpdump

[Assistant] normal


[User] date: 31-Mar-19, time:    12:38:10   , fridge_temperature: 2, temp_condition: low

[Assistant] normal


[User] PID: 7374, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <systemd-udev>, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.190, src_port: 1378, dst_ip: 192.168.1.190, dst_port: 1378, proto: tcp, service: -, duration: 0.18992, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49994, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000158, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.190, src_port: 49497, dst_ip: 149.135.82.148, dst_port: 53, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 67, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a1089.dscd.akamai.net, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 2119, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 0

[Assistant] normal


[User] PID: 4075, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 0

[Assistant] normal


[User] PID: 1679, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: packagekitd

[Assistant] attack


[User] PID: 2993, TRUN: 0, TSLPI: 5, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: evolution-cale

[Assistant] attack


[User] src_ip: 192.168.1.194, src_port: 80, dst_ip: 192.168.1.194, dst_port: 1595, proto: tcp, service: -, duration: 0.230807, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:00, temperature: 23.1036592, pressure: 0.698371647, humidity: 3.103834721

[Assistant] normal


[User] date: 1-Apr-19, time:  20:33:52 , current_temperature: 28.68978133, thermostat_status: 1

[Assistant] normal


[User] PID: 10362, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <vsftpd>, attack: 0

[Assistant] normal


[User] date: 25-Apr-19, time: 8:54:26, current_temperature: 26.00557503, thermostat_status: 1

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 48670, dst_ip: 151.101.30.2, dst_port: 443, proto: tcp, service: ssl, duration: 0.136089, src_bytes: 499, dst_bytes: 7034, conn_state: SF, missed_bytes: 0, src_pkts: 13, src_ip_bytes: 1159, dst_pkts: 13, dst_ip_bytes: 7784, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time:    12:41:16   , fridge_temperature: 1, temp_condition: low

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 35214, dst_ip: 13.211.225.170, dst_port: 443, proto: tcp, service: ssl, duration: 20.902839, src_bytes: 1177, dst_bytes: 6316, conn_state: SF, missed_bytes: 0, src_pkts: 21, src_ip_bytes: 2289, dst_pkts: 18, dst_ip_bytes: 7329, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 4373, MINFLT: 2065, MAJFLT: 0, VSTEXT: 148, VSIZE: 17644, RSIZE: 2412, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 43166, dst_ip: 192.168.1.184, dst_port: 443, proto: tcp, service: -, duration: 61.291529, src_bytes: 0, dst_bytes: 1, conn_state: S1, missed_bytes: 1, src_pkts: 3, src_ip_bytes: 164, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3793, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: drone, attack: 0

[Assistant] normal


[User] date: 27-Apr-19, time:  05:06:10 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 32, dst_ip: 192.168.1.190, dst_port: 32, proto: tcp, service: -, duration: 0.000001, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3292, TRUN: 1, TSLPI: 0, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 0, Status: 0, EXC: 0, State: R, CPU: 0.01, CMD: atop

[Assistant] attack


[User] Processor(_Total) DPC Rate: 47, Processor(_Total) pct_ Idle Time: 51.66666667, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.520833333, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 10.52083333, Processor(_Total) pct_ C1 Time: 53.33333333, Processor(_Total) pct_ Processor Time: 48.33333333, Processor(_Total) C1 Transitions sec: 2452.880893, Processor(_Total) pct_ DPC Time: 0.104166667, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 37.8125, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 2997.217384, Processor(_Total) Interrupts sec: 4693.02722, Process(_Total) Pool Paged Bytes: 7316352, Process(_Total) IO Read Operations sec: 151.9342146, Process(_Total) Working Set - Private: 701739008, Process(_Total) Working Set Peak: 1915953152, Process(_Total) IO Write Operations sec: 149.8675359, Process(_Total) Page File Bytes: 1842221056, Process(_Total) pct_ User Time: 10.52083333, Process(_Total) Virtual Bytes Peak: 7183507456, Process(_Total) Page File Bytes Peak: 2121191424, Process(_Total) IO Other Bytes sec: 3479.753516, Process(_Total) Private Bytes: 1842221056, Process(_Total) IO Write Bytes sec: 64614.04143, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6195429376, Process(_Total) pct_ Processor Time: 99.375, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 991696, Process(_Total) Working Set: 773586944, Process(_Total) Page Faults sec: 6687.905457, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 127.1340707, Process(_Total) IO Data Operations sec: 301.8017505, Process(_Total) Thread Count: 532, Process(_Total) pct_ Privileged Time: 88.85416667, Process(_Total) IO Data Bytes sec: 128662.8796, Process(_Total) IO Read Bytes sec: 64048.83815, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13014, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 2882.750053, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 166.4009651, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 3049.151018, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 3.066684453, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 4.666693733, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 7.733378187, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 3.066684453, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 4.666693733, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 92831744, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 1089536, Memory Available Bytes: 84979712, Memory Commit Limit: 2398609408, Memory Transition Pages RePurposed sec: 10443.12724, Memory Pages Output sec: 3882.622519, Memory Page Reads sec: 2860.149922, Memory Demand Zero Faults sec: 928.0053824, Memory Available KBytes: 82988, Memory Pages sec: 16877.56456, Memory Cache Bytes: 466944, Memory Pool Nonpaged Bytes: 52539392, Memory Page Faults sec: 6860.839793, Memory Transition Faults sec: 3122.951446, Memory System Cache Resident Bytes: 466944, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 562.8032643, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 59387904, Memory System Driver Resident Bytes: 1335296, Memory Standby Cache Normal Priority Bytes: 25591808, Memory Pool Paged Allocs: 62254, Memory Pool Nonpaged Allocs: 52736, Memory pct_ Committed Bytes In Use: 91.25270237, Memory Free System Page Table Entries: 33561952, Memory Available MBytes: 81, Memory Modified Page List Bytes: 40960, Memory Cache Faults sec: 0.466669373, Memory Committed Bytes: 2188795904, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 12994.94204, Memory Pool Paged Resident Bytes: 14344192, Memory Write Copies sec: 0

[Assistant] normal


[User] date: 25-Apr-19, time: 8:17:25, latitude: 26.44679977, longitude: 37.84123111

[Assistant] attack


[User] PID: 6172, RDDSK: 0, WRDSK: 76, WCANCL: 0, DSK: 0.03, CMD: apache2, attack: 1

[Assistant] attack


[User] date: 26-Apr-19, time:  16:45:51 , motion_status: 1, light_status:  on

[Assistant] attack


[User] date: 26-Apr-19, time:  19:17:36 , FC1_Read_Input_Register: 31831, FC2_Read_Discrete_Value: 52058, FC3_Read_Holding_Register: 47934, FC4_Read_Coil: 6026

[Assistant] attack


[User] Processor_DPC_Rate: 1, Processor_pct_ Idle_Time: 64.15855133, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 29.53200366, Processor_pct_ C1_Time: 64.15855133, Processor_pct_ Processor_Time: 33.35767429, Processor_C1_ransitions_sec: 340.6064034, Processor_pct_ DPC_Time: 0.078126994, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 3.828222696, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 70.30132166, Processor_Interrupts_sec: 1199.122544, Process_Pool_Paged Bytes: 24614648, Process_IO Read_Operations_sec: 5.800109042, Process_Working_Set_ Private: 1842487296, Process_Working_Set_Peak: 5879599104, Process_IO_Write Operations_sec: 1.20002256, Process_Page_File Bytes: 4044795904, Process_pct_ User_Time: 59.06400731, Process_Virtual_Bytes Peak: 1.57E+14, Process_Page_File Bytes Peak: 5188497408, Process_IO_Other_Bytes_sec: 3405.264019, Process_Private_Bytes: 4044795904, Process_IO_Write_Bytes_sec: 156.4029404, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.57E+14, Process_pct_ Processor_Time: 199.8488501, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2825400, Process_Working Set: 1917145088, Process_Page Faults_sec: 3317.262365, Process_ID Process: 0, Process_IO Other Operations_sec: 76.30143447, Process_IO Data Operations_sec: 7.000131602, Process_Thread Count: 1014, Process_pct_ Privileged_Time: 140.7848428, Process_IO Data Bytes_sec: 1327.424956, Process_IO Read Bytes_sec: 1171.022015, Process_Priority Base: 0, Process_Handle Count: 39847, Network_I(Intel R _82574L_GNC)TCP_APS: 5690, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4788.490024, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 253.8047715, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5042.294795, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 4.700088362, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 6.700125962, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 11.40021432, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 1, Network_I(Intel R _82574L_GNC) Packets Sent sec: 4.700088362, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 6.700125962, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 105570304, Memory Free & Zero Page List Bytes: 9302016, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 488411136, Memory Commit Limit: 6252797952, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 503.2094603, Memory Page Reads sec: 10.40019552, Memory Demand Zero Faults sec: 1029.719359, Memory Available KBytes: 476964, Memory Pages sec: 599.5112708, Memory Cache Bytes: 1138688, Memory Pool Nonpaged Bytes: 100585472, Memory Page Faults sec: 3324.862507, Memory Transition Faults sec: 1700.931978, Memory System Cache Resident Bytes: 1138688, Memory Long-Term Average Standby Cache Lifetime (s): 59, Memory Standby Cache Reserve Bytes: 111173632, Memory Page Writes sec: 40.70076517, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 225193984, Memory System Driver Resident Bytes: 1.76E+13, Memory Standby Cache Normal Priority Bytes: 142737408, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 79.74337104, Memory Free System Page Table Entries: 12209210, Memory Available MBytes: 465, Memory Modified Page List Bytes: 30457856, Memory Cache Faults sec: 1.800033841, Memory Committed Bytes: 4986191872, Memory System Driver Total Bytes: 18178048, Memory Pages Input sec: 96.30181047, Memory Pool Paged Resident Bytes: 22032384, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 50238.2871, LogicalDisk(_Total) pct_ Idle Time: 99.59390064, LogicalDisk(_Total) Disk Reads sec: 10.000188, LogicalDisk(_Total) pct_ Free Space: 82.40180199, LogicalDisk(_Total) Disk Read Bytes sec: 397729.0773, LogicalDisk(_Total) Avg  Disk sec Read: 0.000543804, LogicalDisk(_Total) Disk Writes sec: 41.10077269, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 168646, LogicalDisk(_Total) Avg  Disk sec Write: 0.000274219, LogicalDisk(_Total) Disk Bytes sec: 2462561.496, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.005438179, LogicalDisk(_Total) pct_ Disk Time: 0.556961214, LogicalDisk(_Total) Avg  Disk Bytes Read: 39772.16, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.011270678, LogicalDisk(_Total) Avg  Disk Queue Length: 0.016708856, LogicalDisk(_Total) pct_ Disk Read Time: 0.181272626, LogicalDisk(_Total) Disk Write Bytes sec: 2064832.419, LogicalDisk(_Total) Disk Transfers sec: 51.1009607, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 48190.12133, LogicalDisk(_Total) pct_ Disk Write Time: 0.375688588, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000326975

[Assistant] normal


[User] date: 2-Apr-19, time:    04:05:11   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 34804, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.014567, src_bytes: 84, dst_bytes: 424, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 140, dst_pkts: 2, dst_ip_bytes: 480, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1663, MINFLT: 0, MAJFLT: 0, VSTEXT: 12, VSIZE: 9480, RSIZE: 3500, VGROW: 0, RGROW: 0, MEM: 0, CMD: haveged

[Assistant] attack


[User] date: 2-Apr-19, time:    04:01:59   , fridge_temperature: 3.5, temp_condition: low

[Assistant] normal


[User] PID: 10999, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 49560, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000033, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 2882, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: 0, EXC: 0, State: S, CPU: 0, CMD: vmtoolsd

[Assistant] attack


[User] PID: 3897, RDDSK: 0, WRDSK: 24, WCANCL: 0, DSK: 0.11, CMD: atop, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 1880, dst_ip: 192.168.1.152, dst_port: 51782, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 2-Apr-19, time:  04:04:00 , current_temperature: 26.42912229, thermostat_status: 1

[Assistant] normal


[User] date: 25-Apr-19, time:  10:14:59 , FC1_Read_Input_Register: 61297, FC2_Read_Discrete_Value: 64587, FC3_Read_Holding_Register: 38187, FC4_Read_Coil: 37200

[Assistant] attack


[User] PID: 1371, MINFLT: 50, MAJFLT: 0, VSTEXT: 36, VSIZE: 19296, RSIZE: 592, VGROW: 0, RGROW: 0, MEM: 0, CMD: irqbalance

[Assistant] normal


[User] date: 26-Apr-19, time: 15:14:39, motion_status: 0, light_status:  off

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 35644, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.017686, src_bytes: 264, dst_bytes: 1919, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 532, dst_pkts: 6, dst_ip_bytes: 2239, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 25-Apr-19, time: 15:23:37, temperature: 42.24262878, pressure: 0.331134814, humidity: 95.64264137

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:43, FC1_Read_Input_Register: 10096, FC2_Read_Discrete_Value: 3077, FC3_Read_Holding_Register: 9729, FC4_Read_Coil: 54369

[Assistant] normal


[User] date: 28-Apr-19, time:  04:44:38 , current_temperature: 26.95242788, thermostat_status: 1

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 50576, dst_ip: 192.168.1.184, dst_port: 21, proto: tcp, service: -, duration: 0.000019, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 60, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:42:12, FC1_Read_Input_Register: 55208, FC2_Read_Discrete_Value: 2676, FC3_Read_Holding_Register: 57680, FC4_Read_Coil: 61219

[Assistant] normal


[User] PID: 2460, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: bamfdaemon

[Assistant] normal


[User] date: 26-Apr-19, time:  16:34:31 , temperature: 36.15796925, pressure: 1.035, humidity: 58.84995721

[Assistant] attack


[User] date: 31-Mar-19, time: 12:40:35, motion_status: 0, light_status:  off

[Assistant] normal


[User] PID: 3031, RDDSK: 0, WRDSK: 4, WCANCL: 0, DSK: 0, CMD: atop, attack: 1

[Assistant] attack


[User] PID: 3155, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: gnome-terminal

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:16, FC1_Read_Input_Register: 37414, FC2_Read_Discrete_Value: 52500, FC3_Read_Holding_Register: 44240, FC4_Read_Coil: 44834

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:05, FC1_Read_Input_Register: 39311, FC2_Read_Discrete_Value: 43947, FC3_Read_Holding_Register: 13267, FC4_Read_Coil: 35231

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 1880, dst_ip: 192.168.1.152, dst_port: 51782, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 5843, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] PID: 3676, MINFLT: 2072, MAJFLT: 0, VSTEXT: 148, VSIZE: 18016, RSIZE: 2580, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] PID: 2793, MINFLT: 0, MAJFLT: 0, VSTEXT: 38, VSIZE: 324.1, RSIZE: 5864, VGROW: 0, RGROW: 0, MEM: 0, CMD: polit-gnome-a

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49906, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.000187, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 79, dst_ip: 192.168.1.190, dst_port: 79, proto: tcp, service: -, duration: 0.000041, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3295, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 3, Status: 0, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 49943, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.003584, src_bytes: 80, dst_bytes: 112, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 136, dst_pkts: 2, dst_ip_bytes: 168, dns_query: www.mqtt-dashboard.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1389, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: 0, EXC: 0, State: S, CPU: 0, CMD: cron

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 34296, dst_ip: 192.168.1.152, dst_port: 10502, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:16, FC1_Read_Input_Register: 54399, FC2_Read_Discrete_Value: 20896, FC3_Read_Holding_Register: 34866, FC4_Read_Coil: 29981

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 43672, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.003337, src_bytes: 155, dst_bytes: 653, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 423, dst_pkts: 5, dst_ip_bytes: 921, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 11748, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <systemd-udev>, attack: 0

[Assistant] normal


[User] date: 25-Apr-19, time:  19:43:03 , motion_status: 0, light_status:  off

[Assistant] attack


[User] PID: 2845, MINFLT: 0, MAJFLT: 0, VSTEXT: 319, VSIZE: 362.7, RSIZE: 1924, VGROW: 0, RGROW: 160, MEM: 0, CMD: udissd

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:12, motion_status: 1, light_status:  on

[Assistant] normal


[User] PID: 3295, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 0, Status: 0, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] attack


[User] date: 2-Apr-19, time:  04:04:02 , current_temperature: 25.93853376, thermostat_status: 1

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 74.14118028, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 23.04680701, Processor_pct_ C1_Time: 74.14118028, Processor_pct_ Processor_Time: 24.84397171, Processor_C1_ransitions_sec: 136.0990854, Processor_pct_ DPC_Time: 0.156249539, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 1.796869699, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 31.89978563, Processor_Interrupts_sec: 644.3956697, Process_Pool_Paged Bytes: 22129216, Process_IO Read_Operations_sec: 0, Process_Working_Set_ Private: 1746681856, Process_Working_Set_Peak: 5638864896, Process_IO_Write Operations_sec: 0.099999328, Process_Page_File Bytes: 2843774976, Process_pct_ User_Time: 46.09361402, Process_Virtual_Bytes Peak: 1.55E+14, Process_Page_File Bytes Peak: 3891585024, Process_IO_Other_Bytes_sec: 4927.566887, Process_Private_Bytes: 2843774976, Process_IO_Write_Bytes_sec: 1845.787596, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.55E+14, Process_pct_ Processor_Time: 199.6869109, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2330856, Process_Working Set: 2308743168, Process_Page Faults_sec: 783.2947363, Process_ID Process: 0, Process_IO Other Operations_sec: 74.59949869, Process_IO Data Operations_sec: 0.099999328, Process_Thread Count: 980, Process_pct_ Privileged_Time: 153.5932969, Process_IO Data Bytes_sec: 1845.787596, Process_IO Read Bytes_sec: 0, Process_Priority Base: 0, Process_Handle Count: 38601, Network_I(Intel R _82574L_GNC)TCP_APS: 5290, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4987.566484, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 278.3981292, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5265.964613, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 5.199965056, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 8.49994288, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 13.69990794, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 2, Network_I(Intel R _82574L_GNC) Packets Sent sec: 5.199965056, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 8.49994288, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 106577920, Memory Free & Zero Page List Bytes: 17936384, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 331137024, Memory Commit Limit: 8473149440, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 843.1943337, Memory Available KBytes: 323376, Memory Pages sec: 0, Memory Cache Bytes: 13631488, Memory Pool Nonpaged Bytes: 89620480, Memory Page Faults sec: 793.1946697, Memory Transition Faults sec: 138.099072, Memory System Cache Resident Bytes: 13631488, Memory Long-Term Average Standby Cache Lifetime (s): 23, Memory Standby Cache Reserve Bytes: 5713920, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 161996800, Memory System Driver Resident Bytes: 4169728, Memory Standby Cache Normal Priority Bytes: 145489920, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 43.45420179, Memory Free System Page Table Entries: 12210413, Memory Available MBytes: 315, Memory Modified Page List Bytes: 4554752, Memory Cache Faults sec: 0, Memory Committed Bytes: 3681939456, Memory System Driver Total Bytes: 18202624, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 70029312, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 6997.333333, LogicalDisk(_Total) pct_ Idle Time: 99.96878509, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 81.3112287, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 2.099985888, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 166414, LogicalDisk(_Total) Avg  Disk sec Write: 0.000444181, LogicalDisk(_Total) Disk Bytes sec: 14694.30125, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.031092908, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000932777, LogicalDisk(_Total) Avg  Disk Queue Length: 0.000932777, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 14694.30125, LogicalDisk(_Total) Disk Transfers sec: 2.099985888, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 6997.333333, LogicalDisk(_Total) pct_ Disk Write Time: 0.031092908, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000444181

[Assistant] normal


[User] PID: 4375, MINFLT: 2069, MAJFLT: 0, VSTEXT: 148, VSIZE: 17952, RSIZE: 2468, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 46230, dst_ip: 192.168.1.184, dst_port: 443, proto: tcp, service: -, duration: 0.00074, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 26-Apr-19, time:  15:14:19 , FC1_Read_Input_Register: 4136, FC2_Read_Discrete_Value: 3748, FC3_Read_Holding_Register: 4357, FC4_Read_Coil: 38725

[Assistant] attack


[User] PID: 3031, RDDSK: 0, WRDSK: 8, WCANCL: 0, DSK: 0.03, CMD: atop, attack: 1

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:27, FC1_Read_Input_Register: 50402, FC2_Read_Discrete_Value: 22719, FC3_Read_Holding_Register: 47716, FC4_Read_Coil: 36881

[Assistant] normal


[User] date: 25-Apr-19, time:  19:39:11 , fridge_temperature: 8.1, temp_condition: high

[Assistant] attack


[User] date: 31-Mar-19, time:    12:43:55   , door_state: open, sphone_signal: true

[Assistant] normal


[User] date: 2-Apr-19, time:  00:07:19 , current_temperature: 28.1742515, thermostat_status: 1

[Assistant] normal


[User] src_ip: 192.168.1.33, src_port: 39189, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] Processor_DPC_Rate: 54, Processor_pct_ Idle_Time: 11.33309004, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.312501931, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 27.50016995, Processor_pct_ C1_Time: 11.33309004, Processor_pct_ Processor_Time: 87.18742082, Processor_C1_ransitions_sec: 980.9959877, Processor_pct_ DPC_Time: 1.328133208, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 59.68786887, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 1942.892054, Processor_Interrupts_sec: 5451.477703, Process_Pool_Paged Bytes: 25141296, Process_IO Read_Operations_sec: 151.099382, Process_Working_Set_ Private: 1519644672, Process_Working_Set_Peak: 6040788992, Process_IO_Write Operations_sec: 16.09993415, Process_Page_File Bytes: 5182582784, Process_pct_ User_Time: 55.0003399, Process_Virtual_Bytes Peak: 1.66E+14, Process_Page_File Bytes Peak: 6679552000, Process_IO_Other_Bytes_sec: 24087.70148, Process_Private_Bytes: 5182582784, Process_IO_Write_Bytes_sec: 46259.7108, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.66E+14, Process_pct_ Processor_Time: 196.7199657, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 3267648, Process_Working Set: 1836724224, Process_Page Faults_sec: 42816.32488, Process_ID Process: 0, Process_IO Other Operations_sec: 380.0984454, Process_IO Data Operations_sec: 167.1993162, Process_Thread Count: 1128, Process_pct_ Privileged_Time: 141.7196258, Process_IO Data Bytes_sec: 343741.2941, Process_IO Read Bytes_sec: 297481.5833, Process_Priority Base: 0, Process_Handle Count: 41080, Network_I(Intel R _82574L_GNC)TCP_APS: 5390, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 6576.073104, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 509.9979141, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 7086.071018, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 6.499973415, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 9.199962372, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 15.69993579, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 2, Network_I(Intel R _82574L_GNC) Packets Sent sec: 6.499973415, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 9.199962372, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 106528768, Memory Free & Zero Page List Bytes: 14303232, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 443826176, Memory Commit Limit: 7524700160, Memory Transition Pages RePurposed sec: 16604.93209, Memory Pages Output sec: 2288.790639, Memory Page Reads sec: 2139.491249, Memory Demand Zero Faults sec: 9003.463176, Memory Available KBytes: 433424, Memory Pages sec: 13406.44517, Memory Cache Bytes: 3096576, Memory Pool Nonpaged Bytes: 119988224, Memory Page Faults sec: 43568.12181, Memory Transition Faults sec: 19992.91823, Memory System Cache Resident Bytes: 3096576, Memory Long-Term Average Standby Cache Lifetime (s): 12, Memory Standby Cache Reserve Bytes: 223383552, Memory Page Writes sec: 26.19989284, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 169201664, Memory System Driver Resident Bytes: 380928, Memory Standby Cache Normal Priority Bytes: 36818944, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 81.05629298, Memory Free System Page Table Entries: 12196826, Memory Available MBytes: 423, Memory Modified Page List Bytes: 230002688, Memory Cache Faults sec: 122.9994969, Memory Committed Bytes: 6099243008, Memory System Driver Total Bytes: 18178048, Memory Pages Input sec: 11117.65453, Memory Pool Paged Resident Bytes: 41955328, Memory Write Copies sec: 41.39983067, LogicalDisk(_Total) Avg  Disk Bytes Write: 306162.7013, LogicalDisk(_Total) pct_ Idle Time: 75.87523491, LogicalDisk(_Total) Disk Reads sec: 2119.291332, LogicalDisk(_Total) pct_ Free Space: 81.79543933, LogicalDisk(_Total) Disk Read Bytes sec: 45886788.32, LogicalDisk(_Total) Avg  Disk sec Read: 0.001027103, LogicalDisk(_Total) Disk Writes sec: 30.79987403, LogicalDisk(_Total) Current Disk Queue Length: 4, LogicalDisk(_Total) Split IO Sec: 11.39995337, LogicalDisk(_Total) Free Megabytes: 167405, LogicalDisk(_Total) Avg  Disk sec Write: 0.00124288, LogicalDisk(_Total) Disk Bytes sec: 55316560.96, LogicalDisk(_Total) Avg  Disk Read Queue Length: 2.176751892, LogicalDisk(_Total) pct_ Disk Time: 73.8344273, LogicalDisk(_Total) Avg  Disk Bytes Read: 21651.94923, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.038280937, LogicalDisk(_Total) Avg  Disk Queue Length: 2.215032829, LogicalDisk(_Total) pct_ Disk Read Time: 72.55839641, LogicalDisk(_Total) Disk Write Bytes sec: 9429772.632, LogicalDisk(_Total) Disk Transfers sec: 2150.091206, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 25727.5416, LogicalDisk(_Total) pct_ Disk Write Time: 1.276030886, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.001030194

[Assistant] normal


[User] date: 1-Apr-19, time:  19:26:32 , current_temperature: 33.20189381, thermostat_status: 1

[Assistant] normal


[User] src_ip: 192.168.1.36, src_port: 34638, dst_ip: 192.168.1.184, dst_port: 443, proto: tcp, service: -, duration: 0.00054, src_bytes: 0, dst_bytes: 0, conn_state: RSTR, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 58392, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 34722, dst_ip: 18.184.104.180, dst_port: 80, proto: tcp, service: http, duration: 1.332529, src_bytes: 322, dst_bytes: 12183, conn_state: SF, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 642, dst_pkts: 12, dst_ip_bytes: 12815, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 59361, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000043, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.37, src_port: 33005, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 60, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] Processor(_Total) DPC Rate: 0, Processor(_Total) pct_ Idle Time: 99.58333333, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 0, Processor(_Total) pct_ C1 Time: 100, Processor(_Total) pct_ Processor Time: 0.416666667, Processor(_Total) C1 Transitions sec: 65.40019707, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 0.416666667, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 1.800005424, Processor(_Total) Interrupts sec: 67.46686997, Process(_Total) Pool Paged Bytes: 6412904, Process(_Total) IO Read Operations sec: 1.733338556, Process(_Total) Working Set - Private: 167854080, Process(_Total) Working Set Peak: 1154473984, Process(_Total) IO Write Operations sec: 1.000003013, Process(_Total) Page File Bytes: 655351808, Process(_Total) pct_ User Time: 0, Process(_Total) Virtual Bytes Peak: 5380046848, Process(_Total) Page File Bytes Peak: 903729152, Process(_Total) IO Other Bytes sec: 2870.675317, Process(_Total) Private Bytes: 655351808, Process(_Total) IO Write Bytes sec: 131.867064, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 4600020992, Process(_Total) pct_ Processor Time: 100, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 936120, Process(_Total) Working Set: 513241088, Process(_Total) Page Faults sec: 6.866687358, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 93.26694771, Process(_Total) IO Data Operations sec: 2.73334157, Process(_Total) Thread Count: 540, Process(_Total) pct_ Privileged Time: 100, Process(_Total) IO Data Bytes sec: 278.7341733, Process(_Total) IO Read Bytes sec: 146.8671092, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 14174, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 38.40011571, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 0, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 38.40011571, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 0, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 0.600001808, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 0.600001808, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 0, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 0.600001808, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 102932480, Memory Free & Zero Page List Bytes: 15990784, Memory Cache Bytes Peak: 135745536, Memory System Code Resident Bytes: 1474560, Memory Available Bytes: 539557888, Memory Commit Limit: 2146951168, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 6.066684948, Memory Available KBytes: 526912, Memory Pages sec: 0, Memory Cache Bytes: 14688256, Memory Pool Nonpaged Bytes: 60915712, Memory Page Faults sec: 9.066693988, Memory Transition Faults sec: 3.53334398, Memory System Cache Resident Bytes: 14688256, Memory Standby Cache Reserve Bytes: 478859264, Memory Page Writes sec: 0, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 29880320, Memory System Driver Resident Bytes: 3424256, Memory Standby Cache Normal Priority Bytes: 14827520, Memory Pool Paged Allocs: 84127, Memory Pool Nonpaged Allocs: 69758, Memory pct_ Committed Bytes In Use: 46.60732069, Memory Free System Page Table Entries: 33557896, Memory Available MBytes: 514, Memory Modified Page List Bytes: 30507008, Memory Cache Faults sec: 0, Memory Committed Bytes: 1000636416, Memory System Driver Total Bytes: 5832704, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 29335552, Memory Write Copies sec: 0

[Assistant] normal


[User] date: 28-Apr-19, time:  04:58:08 , motion_status: 1, light_status:  on

[Assistant] attack


[User] PID: 3293, MINFLT: 2052, MAJFLT: 0, VSTEXT: 148, VSIZE: 17972, RSIZE: 2472, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] attack


[User] PID: 4033, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: worer/u256:0, attack: 1

[Assistant] attack


[User] date: 2-Apr-19, time:  04:06:38 , motion_status: 1, light_status:  on

[Assistant] normal


[User] PID: 3281, MINFLT: 1979, MAJFLT: 0, VSTEXT: 148, VSIZE: 18512, RSIZE: 3512, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49808, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000103, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 56054, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.192299, src_bytes: 550, dst_bytes: 1919, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 818, dst_pkts: 6, dst_ip_bytes: 2239, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 1-Apr-19, time:   20:47:04   , fridge_temperature: 3.05, temp_condition: low

[Assistant] normal


[User] PID: 3793, TRUN: 0, TSLPI: 11, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0.1, CMD: drone

[Assistant] normal


[User] PID: 1483, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: accounts-daemo, attack: 1

[Assistant] attack


[User] PID: 1851, TRUN: 0, TSLPI: 2, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: vmtoolsd

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 35444, dst_ip: 192.168.1.184, dst_port: 443, proto: tcp, service: -, duration: 60.264216, src_bytes: 0, dst_bytes: 0, conn_state: S3, missed_bytes: 0, src_pkts: 3, src_ip_bytes: 164, dst_pkts: 2, dst_ip_bytes: 112, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 1-Apr-19, time:  19:49:15 , motion_status: 0, light_status:  off

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 45714, dst_ip: 172.217.25.161, dst_port: 443, proto: tcp, service: ssl, duration: 1.064405, src_bytes: 535, dst_bytes: 3108, conn_state: SF, missed_bytes: 0, src_pkts: 15, src_ip_bytes: 1287, dst_pkts: 11, dst_ip_bytes: 3688, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 56599, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.003792, src_bytes: 84, dst_bytes: 436, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 140, dst_pkts: 2, dst_ip_bytes: 492, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:12, latitude: 3.231417902, longitude: 13.63970159

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 44310, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1442, MINFLT: 0, MAJFLT: 0, VSTEXT: 2219, VSIZE: 758, RSIZE: 267.1, VGROW: 0, RGROW: 0, MEM: 0.07, CMD: Xorg

[Assistant] normal


[User] date: 31-Mar-19, time: 12:38:34, latitude: 0, longitude: 10

[Assistant] normal


[User] date: 28-Apr-19, time:  20:18:30 , fridge_temperature: 10.5, temp_condition: high

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49614, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.00014, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2327, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: init

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 44876, dst_ip: 192.168.1.184, dst_port: 443, proto: tcp, service: -, duration: 60.63598, src_bytes: 0, dst_bytes: 0, conn_state: S3, missed_bytes: 0, src_pkts: 3, src_ip_bytes: 164, dst_pkts: 2, dst_ip_bytes: 112, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 49247, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000079, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 2731, MINFLT: 0, MAJFLT: 0, VSTEXT: 35, VSIZE: 280.1, RSIZE: 5144, VGROW: 0, RGROW: 0, MEM: 0, CMD: indicator-appl

[Assistant] attack


[User] PID: 3678, MINFLT: 1794, MAJFLT: 0, VSTEXT: 148, VSIZE: 17952, RSIZE: 2440, VGROW: 4, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 34296, dst_ip: 192.168.1.152, dst_port: 10502, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal