[User] PID: 2129, MINFLT: 0, MAJFLT: 0, VSTEXT: 596, VSIZE: 191.6, RSIZE: 8416, VGROW: 0, RGROW: 0, MEM: 0, CMD: apache2

[Assistant] attack


[User] date: 2-Apr-19, time:    04:01:31   , fridge_temperature: 6.65, temp_condition: high

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:15, motion_status: 0, light_status:  off

[Assistant] normal


[User] date: 2-Apr-19, time:    04:05:57   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 34430, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: -, duration: 0.000151, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49410, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.000136, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2582, TRUN: 0, TSLPI: 5, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 5, Status: -, EXC: 0, State: S, CPU: 0, CMD: fwupd

[Assistant] attack


[User] PID: 2924, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: fwupd, attack: 1

[Assistant] attack


[User] date: 31-Mar-19, time: 12:42:39, temperature: 22.72320926, pressure: 2.873315794, humidity: 15.13582391

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 58699, dst_ip: 8.8.8.8, dst_port: 53, proto: udp, service: dns, duration: 0.000161, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 50950, dst_ip: 192.168.1.133, dst_port: 49175, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 25-Apr-19, time: 9:03:03, latitude: 106.1241303, longitude: 116.6567787

[Assistant] attack


[User] PID: 11460, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: systemd-udevd, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 38210, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 0.010354, src_bytes: 155, dst_bytes: 978, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 375, dst_pkts: 4, dst_ip_bytes: 1150, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3294, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 2, Status: 0, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] attack


[User] PID: 2355, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vmtoolsd, attack: 1

[Assistant] attack


[User] PID: 2798, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 19, PRI: 139, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: tracker-miner-

[Assistant] normal


[User] date: 1-Apr-19, time:   21:03:09   , fridge_temperature: 13.1, temp_condition: high

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 40192, dst_ip: 18.194.169.124, dst_port: 80, proto: tcp, service: http, duration: 0.677682, src_bytes: 3520, dst_bytes: 1694, conn_state: S1, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 3840, dst_pkts: 6, dst_ip_bytes: 2026, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 23-Apr-19, time:  21:40:00 , latitude: 172.4937185, longitude: 181.4214153

[Assistant] attack


[User] src_ip: 192.168.1.190, src_port: 1496, dst_ip: 192.168.1.190, dst_port: 1496, proto: tcp, service: -, duration: 0.281073, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 2589, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: upstart-file-b, attack: 0

[Assistant] normal


[User] date: 31-Mar-19, time: 12:39:54, latitude: 0.962807889, longitude: 11.38176057

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49222, dst_ip: 192.168.1.37, dst_port: 4444, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 1352, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.194, src_port: 80, dst_ip: 192.168.1.194, dst_port: 1189, proto: tcp, service: -, duration: 0.299918, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:37:58, latitude: 0.009416194, longitude: 10.16590771

[Assistant] normal


[User] PID: 3303, RDDSK: 0, WRDSK: 12, WCANCL: 0, DSK: 0.05, CMD: atop, attack: 1

[Assistant] attack


[User] date: 25-Apr-19, time:  16:58:10 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] date: 28-Apr-19, time:  11:06:08 , latitude: 103.5826671, longitude: 113.0866295

[Assistant] attack


[User] PID: 1339, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: whoopsie

[Assistant] normal


[User] date: 28-Apr-19, time:  05:10:15 , latitude: 33.16444807, longitude: 45.90551598

[Assistant] attack


[User] PID: 4032, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: kworker/u256:0

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 50953, dst_ip: 192.168.1.49, dst_port: 9595, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 74.14581951, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 21.9537801, Processor_pct_ C1_Time: 74.14581951, Processor_pct_ Processor_Time: 24.29461595, Processor_C1_ransitions_sec: 140.5033187, Processor_pct_ DPC_Time: 0.156254663, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 2.34381994, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 36.20085506, Processor_Interrupts_sec: 491.8116166, Process_Pool_Paged Bytes: 24305896, Process_IO Read_Operations_sec: 0, Process_Working_Set_ Private: 1324376064, Process_Working_Set_Peak: 4362682368, Process_IO_Write Operations_sec: 0, Process_Page_File Bytes: 2264244224, Process_pct_ User_Time: 43.9075602, Process_Virtual_Bytes Peak: 1.57E+14, Process_Page_File Bytes Peak: 2714411008, Process_IO_Other_Bytes_sec: 4229.799908, Process_Private_Bytes: 2264244224, Process_IO_Write_Bytes_sec: 0, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.57E+14, Process_pct_ Processor_Time: 199.6934589, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2196656, Process_Working Set: 2832728064, Process_Page Faults_sec: 467.2110355, Process_ID Process: 0, Process_IO Other Operations_sec: 47.80112906, Process_IO Data Operations_sec: 0, Process_Thread Count: 1018, Process_pct_ Privileged_Time: 155.7858987, Process_IO Data Bytes_sec: 0, Process_IO Read Bytes_sec: 0, Process_Priority Base: 0, Process_Handle Count: 39853, Network_I(Intel R _82574L_GNC)TCP_APS: 7829, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 5508.930121, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 438.4103553, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5947.340476, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 8.000188964, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 9.400222033, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 17.400411, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 3, Network_I(Intel R _82574L_GNC) Packets Sent sec: 8.000188964, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 9.400222033, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 101371904, Memory Free & Zero Page List Bytes: 110620672, Memory Cache Bytes Peak: 44781568, Memory System Code Resident Bytes: 0, Memory Available Bytes: 369631232, Memory Commit Limit: 4662874112, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 567.2133976, Memory Available KBytes: 360968, Memory Pages sec: 0, Memory Cache Bytes: 28913664, Memory Pool Nonpaged Bytes: 78934016, Memory Page Faults sec: 467.2110355, Memory Transition Faults sec: 3.40008031, Memory System Cache Resident Bytes: 28913664, Memory Long-Term Average Standby Cache Lifetime (s): 819, Memory Standby Cache Reserve Bytes: 5455872, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 117387264, Memory System Driver Resident Bytes: 4472832, Memory Standby Cache Normal Priority Bytes: 136167424, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 72.33618851, Memory Free System Page Table Entries: 12209006, Memory Available MBytes: 352, Memory Modified Page List Bytes: 18157568, Memory Cache Faults sec: 0, Memory Committed Bytes: 3372945408, Memory System Driver Total Bytes: 18128896, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 79278080, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 7082.666667, LogicalDisk(_Total) pct_ Idle Time: 99.98561157, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 83.65263873, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 0.600014172, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.100002362, LogicalDisk(_Total) Free Megabytes: 171206, LogicalDisk(_Total) Avg  Disk sec Write: 0.000759967, LogicalDisk(_Total) Disk Bytes sec: 4249.700378, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.015199454, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000455994, LogicalDisk(_Total) Avg  Disk Queue Length: 0.000455994, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 4249.700378, LogicalDisk(_Total) Disk Transfers sec: 0.600014172, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 7082.666667, LogicalDisk(_Total) pct_ Disk Write Time: 0.015199454, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000759967

[Assistant] normal


[User] PID: 3197, MINFLT: 0, MAJFLT: 0, VSTEXT: 193, VSIZE: 2.3, RSIZE: 279.1, VGROW: 0, RGROW: 0, MEM: 0.08, CMD: firefox

[Assistant] normal


[User] src_ip: 192.168.1.49, src_port: 5353, dst_ip: 224.0.0.251, dst_port: 5353, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 116, dst_pkts: 0, dst_ip_bytes: 0, dns_query: _companion-link._tcp.local, dns_qclass: 32769, dns_qtype: 12, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 11099, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] date: 2-Apr-19, time:  00:29:49 , motion_status: 0, light_status:  off

[Assistant] normal


[User] PID: 2537, MINFLT: 0, MAJFLT: 0, VSTEXT: 223, VSIZE: 642.3, RSIZE: 4468, VGROW: 0, RGROW: 252, MEM: 0, CMD: gnome-session

[Assistant] normal


[User] date: 25-Apr-19, time:  10:01:14 , FC1_Read_Input_Register: 38278, FC2_Read_Discrete_Value: 40253, FC3_Read_Holding_Register: 23882, FC4_Read_Coil: 51292

[Assistant] attack


[User] src_ip: 192.168.1.33, src_port: 7870, dst_ip: 192.168.1.193, dst_port: 49164, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 1172, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1667, MINFLT: 0, MAJFLT: 0, VSTEXT: 12, VSIZE: 9480, RSIZE: 3500, VGROW: 0, RGROW: 0, MEM: 0, CMD: haveged

[Assistant] attack


[User] PID: 2982, MINFLT: 0, MAJFLT: 0, VSTEXT: 119, VSIZE: 472.7, RSIZE: 6556, VGROW: 0, RGROW: 44, MEM: 0, CMD: zeitgeist-data

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:41, FC1_Read_Input_Register: 31820, FC2_Read_Discrete_Value: 49950, FC3_Read_Holding_Register: 20087, FC4_Read_Coil: 3863

[Assistant] normal


[User] date: 1-Apr-19, time:  17:52:04 , latitude: 97.42457236, longitude: 103.2095233

[Assistant] normal


[User] PID: 2722, MINFLT: 0, MAJFLT: 0, VSTEXT: 35, VSIZE: 280.1, RSIZE: 5140, VGROW: 0, RGROW: 0, MEM: 0, CMD: indicator-appl

[Assistant] attack


[User] PID: 1371, MINFLT: 3, MAJFLT: 0, VSTEXT: 36, VSIZE: 19296, RSIZE: 592, VGROW: 0, RGROW: 0, MEM: 0, CMD: irqbalance

[Assistant] normal


[User] PID: 14800, MINFLT: 1933, MAJFLT: 0, VSTEXT: 148, VSIZE: 17932, RSIZE: 2412, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49226, dst_ip: 192.168.1.33, dst_port: 4444, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: RSTOS0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 2405:6e00:10ce:2c00:20c:29ff:feee:e07a, src_port: 60876, dst_ip: 2001:500:48::1, dst_port: 53, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 88, dst_pkts: 0, dst_ip_bytes: 0, dns_query: nodered.org, dns_qclass: 1, dns_qtype: 43, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 4373, MINFLT: 2285, MAJFLT: 0, VSTEXT: 148, VSIZE: 17376, RSIZE: 2340, VGROW: 404, RGROW: 528, MEM: 0, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 49503, dst_ip: 192.168.1.250, dst_port: 89, proto: tcp, service: -, duration: 0.400784, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:00, temperature: 22.23332772, pressure: 1.265908831, humidity: 38.20240198

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:33, temperature: 41.04335863, pressure: 0.701624141, humidity: 13.95634131

[Assistant] normal


[User] PID: 2736, MINFLT: 0, MAJFLT: 0, VSTEXT: 77, VSIZE: 364.9, RSIZE: 1000, VGROW: 0, RGROW: 88, MEM: 0, CMD: pulseaudio

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 54744, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.315854, src_bytes: 543, dst_bytes: 1919, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 811, dst_pkts: 5, dst_ip_bytes: 2179, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1495, TRUN: 0, TSLPI: 17, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: 0, EXC: 0, State: S, CPU: 0, CMD: mysqld

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 43716, dst_ip: 18.194.169.124, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 43608, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000022, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 67.61019553, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 27.85408141, Processor_pct_ C1_Time: 67.61019553, Processor_pct_ Processor_Time: 31.06897269, Processor_C1_ransitions_sec: 198.7976836, Processor_pct_ DPC_Time: 0, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 3.20791387, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 41.46208616, Processor_Interrupts_sec: 1282.420322, Process_Pool_Paged Bytes: 22377480, Process_IO Read_Operations_sec: 0.500749833, Process_Working_Set_ Private: 1691197440, Process_Working_Set_Peak: 5962498048, Process_IO_Write Operations_sec: 5.808698061, Process_Page_File Bytes: 3314434048, Process_pct_ User_Time: 55.23871201, Process_Virtual_Bytes Peak: 1.55E+14, Process_Page_File Bytes Peak: 4341460992, Process_IO_Other_Bytes_sec: 20605.75547, Process_Private_Bytes: 3314434048, Process_IO_Write_Bytes_sec: 24903.09039, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.55E+14, Process_pct_ Processor_Time: 197.4823075, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2464512, Process_Working Set: 1910800384, Process_Page Faults_sec: 1073.707792, Process_ID Process: 0, Process_IO Other Operations_sec: 314.7713449, Process_IO Data Operations_sec: 6.309447893, Process_Thread Count: 1008, Process_pct_ Privileged_Time: 142.2435955, Process_IO Data Bytes_sec: 24904.09189, Process_IO Read Bytes_sec: 1.001499666, Process_Priority Base: 0, Process_Handle Count: 39191, Network_I(Intel R _82574L_GNC)TCP_APS: 5247, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 5012.806276, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 292.0373025, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5304.843579, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 5.408098194, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 8.412597191, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 13.82069539, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 2, Network_I(Intel R _82574L_GNC) Packets Sent sec: 5.408098194, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 8.412597191, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 103796736, Memory Free & Zero Page List Bytes: 6127616, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 532312064, Memory Commit Limit: 8473145344, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 1.502249498, Memory Demand Zero Faults sec: 1195.690451, Memory Available KBytes: 519836, Memory Pages sec: 7.911847358, Memory Cache Bytes: 3248128, Memory Pool Nonpaged Bytes: 96342016, Memory Page Faults sec: 2494.034617, Memory Transition Faults sec: 1432.244672, Memory System Cache Resident Bytes: 3248128, Memory Long-Term Average Standby Cache Lifetime (s): 1096, Memory Standby Cache Reserve Bytes: 187699200, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 186359808, Memory System Driver Resident Bytes: 110592, Memory Standby Cache Normal Priority Bytes: 152125440, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 48.98404215, Memory Free System Page Table Entries: 12210303, Memory Available MBytes: 507, Memory Modified Page List Bytes: 26816512, Memory Cache Faults sec: 4.406598529, Memory Committed Bytes: 4150489088, Memory System Driver Total Bytes: 18202624, Memory Pages Input sec: 7.911847358, Memory Pool Paged Resident Bytes: 43753472, Memory Write Copies sec: 68.10197726, LogicalDisk(_Total) Avg  Disk Bytes Write: 8473.239437, LogicalDisk(_Total) pct_ Idle Time: 99.88389367, LogicalDisk(_Total) Disk Reads sec: 1.502249498, LogicalDisk(_Total) pct_ Free Space: 81.30194515, LogicalDisk(_Total) Disk Read Bytes sec: 31996.71252, LogicalDisk(_Total) Avg  Disk sec Read: 0.000630253, LogicalDisk(_Total) Disk Writes sec: 7.110647626, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.500749833, LogicalDisk(_Total) Free Megabytes: 166395, LogicalDisk(_Total) Avg  Disk sec Write: 0.000361955, LogicalDisk(_Total) Disk Bytes sec: 92246.9324, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.000946793, LogicalDisk(_Total) pct_ Disk Time: 0.117350184, LogicalDisk(_Total) Avg  Disk Bytes Read: 21299.2, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.002573722, LogicalDisk(_Total) Avg  Disk Queue Length: 0.003520516, LogicalDisk(_Total) pct_ Disk Read Time: 0.031560114, LogicalDisk(_Total) Disk Write Bytes sec: 60250.21988, LogicalDisk(_Total) Disk Transfers sec: 8.612897124, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 10710.32558, LogicalDisk(_Total) pct_ Disk Write Time: 0.085791071, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000408751

[Assistant] normal


[User] PID: 3894, RDDSK: 0, WRDSK: 12, WCANCL: 0, DSK: 0.14, CMD: atop, attack: 0

[Assistant] normal


[User] PID: 3031, RDDSK: 0, WRDSK: 4, WCANCL: 0, DSK: 0.06, CMD: atop, attack: 1

[Assistant] attack


[User] PID: 14848, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <imap-login>, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 44909, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.00044, src_bytes: 0, dst_bytes: 298, conn_state: SHR, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 2, dst_ip_bytes: 354, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 2821, TRUN: 0, TSLPI: 5, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: 0, EXC: 0, State: S, CPU: 0.08, CMD: compiz

[Assistant] attack


[User] src_ip: 172.17.0.7, src_port: 52623, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.019766, src_bytes: 0, dst_bytes: 178, conn_state: SHR, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 2, dst_ip_bytes: 234, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 6014, TRUN: 0, TSLPI: 0, TSLPU: 0, POLI: 0, NICE: 0, PRI: 0, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: E, CPU: 0, CMD: <apache2>

[Assistant] attack


[User] PID: 6451, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 1, Status: 0, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:37, latitude: 2.118227224, longitude: 12.80538854

[Assistant] normal


[User] PID: 2234, MINFLT: 132, MAJFLT: 243.8, VSTEXT: 6092, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: gsd-a11y-setti

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 35791, dst_ip: 192.168.1.133, dst_port: 3766, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2589, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: upstart-file-b, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49384, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.000147, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:  04:06:34 , current_temperature: 34.06910146, thermostat_status: 1

[Assistant] normal


[User] PID: 3790, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: ostinato, attack: 0

[Assistant] normal


[User] Processor(_Total) DPC Rate: 24, Processor(_Total) pct_ Idle Time: 76.66666667, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 1.041666667, Processor(_Total) pct_ C1 Time: 73.33333333, Processor(_Total) pct_ Processor Time: 23.33333333, Processor(_Total) C1 Transitions sec: 3551.883986, Processor(_Total) pct_ DPC Time: 0.416666667, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 22.29166667, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 3369.419854, Processor(_Total) Interrupts sec: 4497.60418, Process(_Total) Pool Paged Bytes: 8024800, Process(_Total) IO Read Operations sec: 0.666657405, Process(_Total) Working Set - Private: 808771584, Process(_Total) Working Set Peak: 2011340800, Process(_Total) IO Write Operations sec: 0.799988885, Process(_Total) Page File Bytes: 2042163200, Process(_Total) pct_ User Time: 1.041666667, Process(_Total) Virtual Bytes Peak: 8087973888, Process(_Total) Page File Bytes Peak: 2635546624, Process(_Total) IO Other Bytes sec: 6778.172495, Process(_Total) Private Bytes: 2042163200, Process(_Total) IO Write Bytes sec: 5066.66294, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6806409216, Process(_Total) pct_ Processor Time: 99.58333333, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1177056, Process(_Total) Working Set: 862810112, Process(_Total) Page Faults sec: 4475.804483, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 301.6624756, Process(_Total) IO Data Operations sec: 1.46664629, Process(_Total) Thread Count: 557, Process(_Total) pct_ Privileged Time: 98.54166667, Process(_Total) IO Data Bytes sec: 5161.728286, Process(_Total) IO Read Bytes sec: 95.06534589, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13724, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 116.3983828, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 86.79879408, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 203.1971769, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 1.266649069, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 1.599977771, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 2.86662684, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 1.266649069, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 1.599977771, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 91004928, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 1044480, Memory Available Bytes: 778240, Memory Commit Limit: 2918703104, Memory Transition Pages RePurposed sec: 5385.658509, Memory Pages Output sec: 3206.622116, Memory Page Reads sec: 3100.156928, Memory Demand Zero Faults sec: 96.065332, Memory Available KBytes: 760, Memory Pages sec: 9313.737268, Memory Cache Bytes: 524288, Memory Pool Nonpaged Bytes: 52645888, Memory Page Faults sec: 4593.269518, Memory Transition Faults sec: 1398.180575, Memory System Cache Resident Bytes: 524288, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 280.2627729, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 651264, Memory System Driver Resident Bytes: 1236992, Memory Standby Cache Normal Priority Bytes: 126976, Memory Pool Paged Allocs: 58732, Memory Pool Nonpaged Allocs: 51549, Memory pct_ Committed Bytes In Use: 81.92005322, Memory Free System Page Table Entries: 33562140, Memory Available MBytes: 0, Memory Modified Page List Bytes: 53248, Memory Cache Faults sec: 0.466660183, Memory Committed Bytes: 2391003136, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 6107.115152, Memory Pool Paged Resident Bytes: 8749056, Memory Write Copies sec: 0.199997221

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 38, dst_ip: 192.168.1.190, dst_port: 38, proto: tcp, service: -, duration: 0.000134, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  20:24:19 , fridge_temperature: 8.8, temp_condition: high

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 61171, dst_ip: 192.168.1.186, dst_port: 5802, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  03:59:21 , motion_status: 0, light_status:  off

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 82, dst_ip: 192.168.1.190, dst_port: 82, proto: tcp, service: -, duration: 0.012652, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 4, src_ip_bytes: 160, dst_pkts: 4, dst_ip_bytes: 160, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 48756, dst_ip: 52.28.231.150, dst_port: 80, proto: tcp, service: -, duration: 2.097852, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 120, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time:    12:41:49   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 31, dst_ip: 192.168.1.190, dst_port: 31, proto: tcp, service: -, duration: 0.000181, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 14027, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <pop3-login>, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 32912, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.012953, src_bytes: 82, dst_bytes: 164, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 138, dst_pkts: 2, dst_ip_bytes: 220, dns_query: safebrowsing.google.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 45496, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.000012, src_bytes: 84, dst_bytes: 436, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 140, dst_pkts: 2, dst_ip_bytes: 492, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.37, src_port: 39553, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 1, dst_ip_bytes: 52, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3793, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: drone, attack: 0

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:18, latitude: 1.948750823, longitude: 12.65672835

[Assistant] normal


[User] date: 2-Apr-19, time:  04:06:17 , current_temperature: 25.67338914, thermostat_status: 1

[Assistant] normal


[User] date: 31-Mar-19, time:    12:42:05   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] PID: 2797, MINFLT: 3, MAJFLT: 0, VSTEXT: 1350, VSIZE: 1.4, RSIZE: 95308, VGROW: 0, RGROW: 704, MEM: 0.03, CMD: nautilus

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 44234, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000018, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49532, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.000099, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1124, MINFLT: 14, MAJFLT: 9, VSTEXT: 1071, VSIZE: 342, RSIZE: 2300, VGROW: 0, RGROW: 196, MEM: 0, CMD: NetworManager

[Assistant] normal


[User] PID: 3678, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] PID: 1488, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: Xorg, attack: 0

[Assistant] normal


[User] PID: 3677, MINFLT: 2075, MAJFLT: 0, VSTEXT: 148, VSIZE: 17948, RSIZE: 2612, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 50056, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000019, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2798, MINFLT: 0, MAJFLT: 0, VSTEXT: 114, VSIZE: 465.6, RSIZE: 5676, VGROW: 0, RGROW: 4, MEM: 0, CMD: tracer-miner-

[Assistant] normal


[User] date: 2-Apr-19, time:  04:06:40 , motion_status: 1, light_status:  on

[Assistant] normal


[User] src_ip: 192.168.1.33, src_port: 7870, dst_ip: 192.168.1.193, dst_port: 49160, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 392, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 46270, dst_ip: 192.168.1.184, dst_port: 443, proto: tcp, service: -, duration: 0.000396, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 49500, dst_ip: 192.168.1.49, dst_port: 18988, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 1-Apr-19, time:  20:27:57 , motion_status: 0, light_status:  off

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 80, dst_ip: 192.168.1.193, dst_port: 1756, proto: tcp, service: -, duration: 0.225622, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 2-Apr-19, time:    04:05:16   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] PID: 1400, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: irqbalance, attack: 0

[Assistant] normal


[User] PID: 3675, MINFLT: 2072, MAJFLT: 0, VSTEXT: 148, VSIZE: 17948, RSIZE: 2604, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] PID: 2596, MINFLT: 0, MAJFLT: 0, VSTEXT: 31, VSIZE: 729.3, RSIZE: 15996, VGROW: 0, RGROW: 0, MEM: 0, CMD: unity-settings

[Assistant] attack


[User] date: 25-Apr-19, time:  15:23:03 , motion_status: 1, light_status:  on

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 60834, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000033, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 1401, MINFLT: 73, MAJFLT: 0, VSTEXT: 36, VSIZE: 19296, RSIZE: 824, VGROW: 0, RGROW: 0, MEM: 0, CMD: irqbalance

[Assistant] attack


[User] PID: 10664, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] PID: 2293, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: gsd-housekeepi

[Assistant] attack


[User] date: 2-Apr-19, time:  04:04:01 , current_temperature: 31.22531892, thermostat_status: 1

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:35, FC1_Read_Input_Register: 26364, FC2_Read_Discrete_Value: 32237, FC3_Read_Holding_Register: 38160, FC4_Read_Coil: 64660

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 33694, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.028409, src_bytes: 90, dst_bytes: 474, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 146, dst_pkts: 2, dst_ip_bytes: 530, dns_query: shavar.services.mozilla.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2999, RDDSK: 0, WRDSK: 12, WCANCL: 0, DSK: 0.12, CMD: firefox, attack: 1

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:23, FC1_Read_Input_Register: 25607, FC2_Read_Discrete_Value: 13242, FC3_Read_Holding_Register: 32275, FC4_Read_Coil: 18602

[Assistant] normal


[User] date: 31-Mar-19, time:    12:43:34   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 44265, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000047, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.33, src_port: 43011, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2121, RDDSK: 0, WRDSK: 4, WCANCL: 0, DSK: 0.04, CMD: apache2, attack: 0

[Assistant] normal


[User] date: 25-Apr-19, time:  15:32:36 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] PID: 6219, MINFLT: 0, MAJFLT: 0, VSTEXT: 0, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: <vsftpd>

[Assistant] attack


[User] PID: 3024, TRUN: 0, TSLPI: 27, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: WebExtensions

[Assistant] attack


[User] date: 25-Apr-19, time:  15:46:29 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 62946, dst_ip: 192.168.1.195, dst_port: 1045, proto: tcp, service: -, duration: 0.002947, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 88, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 26-Apr-19, time:  16:12:27 , current_temperature: 26.19129914, thermostat_status: 1

[Assistant] attack


[User] PID: 2466, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: at-spi-bus-lau

[Assistant] normal


[User] date: 25-Apr-19, time: 8:24:15, latitude: 85.50248815, longitude: 95.98835483

[Assistant] attack


[User] date: 25-Apr-19, time:  16:43:17 , motion_status: 0, light_status:  off

[Assistant] attack


[User] date: 31-Mar-19, time: 12:37:51, motion_status: 1, light_status:  on

[Assistant] normal


[User] src_ip: 192.168.1.37, src_port: 38341, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: gssapi, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 1, dst_ip_bytes: 183, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 6197, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <apache2>, attack: 1

[Assistant] attack


[User] PID: 3263, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: WebExtensions, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.37, src_port: 45021, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 1500, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 46378, dst_ip: 192.168.1.184, dst_port: 443, proto: tcp, service: -, duration: 60.337284, src_bytes: 0, dst_bytes: 1, conn_state: S1, missed_bytes: 1, src_pkts: 3, src_ip_bytes: 164, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1026, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: upstart-socet, attack: 0

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:16, FC1_Read_Input_Register: 5232, FC2_Read_Discrete_Value: 29472, FC3_Read_Holding_Register: 19479, FC4_Read_Coil: 39968

[Assistant] normal


[User] PID: 1328, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: cron

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 79.12155893, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 18.20355752, Processor_pct_ C1_Time: 79.12155893, Processor_pct_ Processor_Time: 19.76371859, Processor_C1_ransitions_sec: 157.003688, Processor_pct_ DPC_Time: 0, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 1.562537126, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 25.10058961, Processor_Interrupts_sec: 526.8123748, Process_Pool_Paged Bytes: 22066288, Process_IO Read_Operations_sec: 5.800136245, Process_Working_Set_ Private: 1283022848, Process_Working_Set_Peak: 5157613568, Process_IO_Write Operations_sec: 1.300030538, Process_Page_File Bytes: 2294157312, Process_pct_ User_Time: 36.40711503, Process_Virtual_Bytes Peak: 1.52E+14, Process_Page_File Bytes Peak: 3334811648, Process_IO_Other_Bytes_sec: 3235.976013, Process_Private_Bytes: 2294157312, Process_IO_Write_Bytes_sec: 6710.157622, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.52E+14, Process_pct_ Processor_Time: 200.0047521, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2219416, Process_Working Set: 1829277696, Process_Page Faults_sec: 547.6128634, Process_ID Process: 0, Process_IO Other Operations_sec: 74.0017383, Process_IO Data Operations_sec: 7.100166783, Process_Thread Count: 986, Process_pct_ Privileged_Time: 163.5976371, Process_IO Data Bytes_sec: 7881.185129, Process_IO Read Bytes_sec: 1171.027507, Process_Priority Base: 0, Process_Handle Count: 38440, Network_I(Intel R _82574L_GNC)TCP_APS: 5358, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4824.61333, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 259.2060888, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5083.819419, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 4.800112755, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 6.700157387, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 11.50027014, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 2, Network_I(Intel R _82574L_GNC) Packets Sent sec: 4.800112755, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 6.700157387, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 109101056, Memory Free & Zero Page List Bytes: 9064448, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 771497984, Memory Commit Limit: 8473149440, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 649.5152571, Memory Available KBytes: 753416, Memory Pages sec: 0, Memory Cache Bytes: 12832768, Memory Pool Nonpaged Bytes: 88920064, Memory Page Faults sec: 549.4129057, Memory Transition Faults sec: 9.300218462, Memory System Cache Resident Bytes: 12832768, Memory Long-Term Average Standby Cache Lifetime (s): 17, Memory Standby Cache Reserve Bytes: 503623680, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 161308672, Memory System Driver Resident Bytes: 4173824, Memory Standby Cache Normal Priority Bytes: 97501184, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 36.98270359, Memory Free System Page Table Entries: 12209847, Memory Available MBytes: 735, Memory Modified Page List Bytes: 35004416, Memory Cache Faults sec: 1.800042283, Memory Committed Bytes: 3133599744, Memory System Driver Total Bytes: 18182144, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 71278592, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 20480, LogicalDisk(_Total) pct_ Idle Time: 99.98801572, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 81.32344391, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 0.500011745, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 166439, LogicalDisk(_Total) Avg  Disk sec Write: 0.00072286, LogicalDisk(_Total) Disk Bytes sec: 10240.24054, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.012047286, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000361439, LogicalDisk(_Total) Avg  Disk Queue Length: 0.000361439, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 10240.24054, LogicalDisk(_Total) Disk Transfers sec: 0.500011745, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 20480, LogicalDisk(_Total) pct_ Disk Write Time: 0.012048286, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.00072286

[Assistant] normal


[User] PID: 2774, MINFLT: 56, MAJFLT: 0, VSTEXT: 10, VSIZE: 1.4, RSIZE: 19512, VGROW: 0, RGROW: 0, MEM: 0.01, CMD: compiz

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 61173, dst_ip: 192.168.1.49, dst_port: 5678, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.180, src_port: 33561, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000443, src_bytes: 31, dst_bytes: 106, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 59, dst_pkts: 1, dst_ip_bytes: 134, dns_query: elasticsearch, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 1496, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: 0, EXC: 0, State: S, CPU: 0, CMD: Xorg

[Assistant] attack


[User] date: 1-Apr-19, time:  15:14:32 , latitude: 10.2527535, longitude: 18.79471697

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:42, temperature: 26.65679923, pressure: -0.887158549, humidity: 75.63527509

[Assistant] normal


[User] date: 28-Apr-19, time:  04:24:33 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 38618, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000192, src_bytes: 68, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 124, dst_pkts: 0, dst_ip_bytes: 0, dns_query: daisy.ubuntu.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 1880, dst_ip: 192.168.1.152, dst_port: 51782, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 3029, RDDSK: 0, WRDSK: 8, WCANCL: 0, DSK: 0.01, CMD: atop, attack: 1

[Assistant] attack


[User] PID: 2906, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: compiz, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 80, dst_ip: 192.168.1.193, dst_port: 1281, proto: tcp, service: -, duration: 0.316173, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 4691, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: kworker/u256:2

[Assistant] normal


[User] PID: 1371, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: irqbalance

[Assistant] normal


[User] date: 26-Apr-19, time:  14:18:27 , motion_status: 1, light_status:  on

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 38705, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.015225, src_bytes: 64, dst_bytes: 525, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 120, dst_pkts: 2, dst_ip_bytes: 581, dns_query: sc.iasds01.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 1-Apr-19, time:  17:05:22 , latitude: 67.53689846, longitude: 80.02058439

[Assistant] normal


[User] date: 2-Apr-19, time:  04:03:55 , current_temperature: 33.66928133, thermostat_status: 1

[Assistant] normal


[User] PID: 2849, MINFLT: 14, MAJFLT: 0, VSTEXT: 1350, VSIZE: 1.4, RSIZE: 48752, VGROW: 0, RGROW: 8, MEM: 0.01, CMD: nautilus

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 49204, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000042, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 3179, RDDSK: 524, WRDSK: 12, WCANCL: 0, DSK: 0, CMD: bash, attack: 0

[Assistant] normal


[User] PID: 3197, TRUN: 0, TSLPI: 60, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: firefox

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 58910, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 128.888646, src_bytes: 4270, dst_bytes: 4003, conn_state: RSTR, missed_bytes: 0, src_pkts: 10, src_ip_bytes: 6040, dst_pkts: 8, dst_ip_bytes: 4347, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 53036, dst_ip: 192.168.1.49, dst_port: 52869, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 26-Apr-19, time:  15:49:49 , motion_status: 0, light_status:  off

[Assistant] attack


[User] date: 26-Apr-19, time:  14:31:06 , latitude: 26.74593895, longitude: 37.3161704

[Assistant] attack


[User] src_ip: fe80::76:ad3e:1329:a7fd, src_port: 5353, dst_ip: ff02::fb, dst_port: 5353, proto: udp, service: dns, duration: 1.03078, src_bytes: 98, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 194, dst_pkts: 0, dst_ip_bytes: 0, dns_query: _airplay._tcp.local, dns_qclass: 32769, dns_qtype: 12, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 3155, MINFLT: 0, MAJFLT: 0, VSTEXT: 280, VSIZE: 711.5, RSIZE: 7412, VGROW: 0, RGROW: 0, MEM: 0, CMD: gnome-terminal

[Assistant] normal


[User] date: 1-Apr-19, time:  19:49:53 , motion_status: 1, light_status:  on

[Assistant] normal


[User] Processor(_Total) DPC Rate: 0, Processor(_Total) pct_ Idle Time: 99.375, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.208333333, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 0.104166667, Processor(_Total) pct_ C1 Time: 100, Processor(_Total) pct_ Processor Time: 0.625, Processor(_Total) C1 Transitions sec: 68.60150923, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 0.520833333, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 5.600123203, Processor(_Total) Interrupts sec: 72.40159284, Process(_Total) Pool Paged Bytes: 5135016, Process(_Total) IO Read Operations sec: 1.733371468, Process(_Total) Working Set - Private: 174854144, Process(_Total) Working Set Peak: 932306944, Process(_Total) IO Write Operations sec: 2.133380268, Process(_Total) Page File Bytes: 514015232, Process(_Total) pct_ User Time: 0, Process(_Total) Virtual Bytes Peak: 4170285056, Process(_Total) Page File Bytes Peak: 752443392, Process(_Total) IO Other Bytes sec: 2879.39668, Process(_Total) Private Bytes: 514015232, Process(_Total) IO Write Bytes sec: 14395.58337, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 3421908992, Process(_Total) pct_ Processor Time: 99.47916667, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 719808, Process(_Total) Working Set: 484814848, Process(_Total) Page Faults sec:  , Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 73.1349423, Process(_Total) IO Data Operations sec: 3.866751735, Process(_Total) Thread Count: 445, Process(_Total) pct_ Privileged Time: 99.47916667, Process(_Total) IO Data Bytes sec: 17659.92185, Process(_Total) IO Read Bytes sec: 3264.338482, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 11142, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 0, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 0, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 0, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 0, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 0, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 0, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 0, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 0, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 98652160, Memory Free & Zero Page List Bytes: 3358720, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 2387968, Memory Available Bytes: 555520000, Memory Commit Limit: 2146951168, Memory Transition Pages RePurposed sec: 14.00030801, Memory Pages Output sec: 0, Memory Page Reads sec: 0.2000044, Memory Demand Zero Faults sec: 99.06884618, Memory Available KBytes: 542500, Memory Pages sec: 1.133358267, Memory Cache Bytes: 14462976, Memory Pool Nonpaged Bytes: 38801408, Memory Page Faults sec: 152.6033573, Memory Transition Faults sec: 15.73367947, Memory System Cache Resident Bytes: 14462976, Memory Standby Cache Reserve Bytes: 461230080, Memory Page Writes sec: 0, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 61460480, Memory System Driver Resident Bytes: 3645440, Memory Standby Cache Normal Priority Bytes: 29470720, Memory Pool Paged Allocs: 78327, Memory Pool Nonpaged Allocs: 58212, Memory pct_ Committed Bytes In Use: 39.24732619, Memory Free System Page Table Entries: 33557923, Memory Available MBytes: 529, Memory Modified Page List Bytes: 27066368, Memory Cache Faults sec: 38.33417669, Memory Committed Bytes: 842620928, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 1.133358267, Memory Pool Paged Resident Bytes: 32735232, Memory Write Copies sec: 0.533345067

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 37364, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000885, src_bytes: 0, dst_bytes: 298, conn_state: SHR, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 2, dst_ip_bytes: 354, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 55486, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.131224, src_bytes: 276, dst_bytes: 1919, conn_state: S3, missed_bytes: 0, src_pkts: 4, src_ip_bytes: 492, dst_pkts: 5, dst_ip_bytes: 2187, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3504, MINFLT: 0, MAJFLT: 0, VSTEXT: 0, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: kworker/1:0

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:18, latitude: 1.61470024, longitude: 12.1639807

[Assistant] normal


[User] src_ip: 192.168.1.33, src_port: 38523, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 41046, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 42908, dst_ip: 192.168.1.152, dst_port: 40193, proto: tcp, service: -, duration: 0.004582, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 44420, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: -, duration: 0.321677, src_bytes: 0, dst_bytes: 961, conn_state: SF, missed_bytes: 0, src_pkts: 4, src_ip_bytes: 220, dst_pkts: 3, dst_ip_bytes: 2078, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 4372, TRUN: 1, TSLPI: 0, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: R, CPU: 0.01, CMD: atop

[Assistant] normal


[User] PID: 1663, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: haveged

[Assistant] attack


[User] PID: 3894, RDDSK: 0, WRDSK: 12, WCANCL: 0, DSK: 0.09, CMD: atop, attack: 0

[Assistant] normal


[User] PID: 1404, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: whoopsie, attack: 0

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:34, temperature: 21.16532379, pressure: 1.695014138, humidity: 43.3702359

[Assistant] normal


[User] date: 25-Apr-19, time:  16:04:28 , fridge_temperature: 4.8, temp_condition: low

[Assistant] attack


[User] date: 1-Apr-19, time:  19:38:31 , current_temperature: 26.98894309, thermostat_status: 1

[Assistant] normal


[User] date: 1-Apr-19, time:  17:08:46 , latitude: 70.07084385, longitude: 82.16903784

[Assistant] normal


[User] PID: 3675, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] date: 1-Apr-19, time:  20:51:22 , current_temperature: 27.61909642, thermostat_status: 1

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49247, dst_ip: 192.168.1.37, dst_port: 4444, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 280, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3677, MINFLT: 2072, MAJFLT: 0, VSTEXT: 148, VSIZE: 17948, RSIZE: 2612, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 57584, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.013546, src_bytes: 76, dst_bytes: 352, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 132, dst_pkts: 2, dst_ip_bytes: 408, dns_query: imprsgmp.taboola.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  16:34:16 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] PID: 11008, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] Processor_DPC_Rate: 11, Processor_pct_ Idle_Time: 30.6122773, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 1.950101154, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 36.97391787, Processor_pct_ C1_Time: 30.6122773, Processor_pct_ Processor_Time: 66.6922723, Processor_C1_ransitions_sec: 362.5333748, Processor_pct_ DPC_Time: 2.730141615, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 29.71954158, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 862.6517099, Processor_Interrupts_sec: 2906.257636, Process_Pool_Paged Bytes: 26863288, Process_IO Read_Operations_sec: 2183.686985, Process_Working_Set_ Private: 1061703680, Process_Working_Set_Peak: 4887433216, Process_IO_Write Operations_sec: 1159.188235, Process_Page_File Bytes: 1913319424, Process_pct_ User_Time: 73.94783575, Process_Virtual_Bytes Peak: 1.83E+14, Process_Page_File Bytes Peak: 2915020800, Process_IO_Other_Bytes_sec: 1830173.712, Process_Private_Bytes: 1913319424, Process_IO_Write_Bytes_sec: 2494579.871, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.83E+14, Process_pct_ Processor_Time: 190.6418888, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2515224, Process_Working Set: 2063200256, Process_Page Faults_sec: 7100.402355, Process_ID Process: 0, Process_IO Other Operations_sec: 4535.511177, Process_IO Data Operations_sec: 3342.87522, Process_Thread Count: 1332, Process_pct_ Privileged_Time: 116.694053, Process_IO Data Bytes_sec: 4309615.543, Process_IO Read Bytes_sec: 1815035.672, Process_Priority Base: 0, Process_Handle Count: 52742, Network_I(Intel R _82574L_GNC)TCP_APS: 9397, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 2209740.764, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 33336.59623, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 2243077.36, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 294.0404266, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 1493.465773, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 1787.506199, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 16, Network_I(Intel R _82574L_GNC) Packets Sent sec: 294.0404266, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 1493.465773, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 111636480, Memory Free & Zero Page List Bytes: 2326528, Memory Cache Bytes Peak: 77492224, Memory System Code Resident Bytes: 2490368, Memory Available Bytes: 364957696, Memory Commit Limit: 3354251264, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 569.9092546, Memory Page Reads sec: 20.36816537, Memory Demand Zero Faults sec: 5627.60428, Memory Available KBytes: 356404, Memory Pages sec: 659.4692759, Memory Cache Bytes: 27004928, Memory Pool Nonpaged Bytes: 81031168, Memory Page Faults sec: 8694.510827, Memory Transition Faults sec: 1839.62474, Memory System Cache Resident Bytes: 27004928, Memory Long-Term Average Standby Cache Lifetime (s): 112, Memory Standby Cache Reserve Bytes: 98410496, Memory Page Writes sec: 13.67862086, Memory System Code Total Bytes: 4419584, Memory Standby Cache Core Bytes: 143884288, Memory System Driver Resident Bytes: 2105344, Memory Standby Cache Normal Priority Bytes: 120336384, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 72.83165771, Memory Free System Page Table Entries: 12280873, Memory Available MBytes: 348, Memory Modified Page List Bytes: 5185536, Memory Cache Faults sec: 1388.529783, Memory Committed Bytes: 2442956800, Memory System Driver Total Bytes: 17965056, Memory Pages Input sec: 89.56002127, Memory Pool Paged Resident Bytes: 79360000, Memory Write Copies sec: 67.29482089, LogicalDisk(_Total) Avg  Disk Bytes Write: 31482.02397, LogicalDisk(_Total) pct_ Idle Time: 98.27431886, LogicalDisk(_Total) Disk Reads sec: 18.47113036, LogicalDisk(_Total) pct_ Free Space: 84.01372012, LogicalDisk(_Total) Disk Read Bytes sec: 334172.1024, LogicalDisk(_Total) Avg  Disk sec Read: 0.000495196, LogicalDisk(_Total) Disk Writes sec: 158.2526574, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 7.388452145, LogicalDisk(_Total) Free Megabytes: 171945, LogicalDisk(_Total) Avg  Disk sec Write: 0.000286473, LogicalDisk(_Total) Disk Bytes sec: 5316286.058, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.009146937, LogicalDisk(_Total) pct_ Disk Time: 1.816087956, LogicalDisk(_Total) Avg  Disk Bytes Read: 18091.58919, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.045335702, LogicalDisk(_Total) Avg  Disk Queue Length: 0.054482639, LogicalDisk(_Total) pct_ Disk Read Time: 0.304898222, LogicalDisk(_Total) Disk Write Bytes sec: 4982113.955, LogicalDisk(_Total) Disk Transfers sec: 176.7237878, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 30082.45876, LogicalDisk(_Total) pct_ Disk Write Time: 1.511189734, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000308289

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 68, dst_ip: 192.168.1.152, dst_port: 68, proto: tcp, service: -, duration: 0.000018, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 26-Apr-19, time:  15:26:35 , current_temperature: 26.22417758, thermostat_status: 1

[Assistant] attack


[User] date: 26-Apr-19, time:  13:48:19 , temperature: 25.6741431, pressure: 1.420317647, humidity: 21.53371948

[Assistant] attack