[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 71.89022257, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.702044638, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 18.64318537, Processor_pct_ C1_Time: 71.89022257, Processor_pct_ Processor_Time: 25.73927834, Processor_C1_ransitions_sec: 193.6019343, Processor_pct_ DPC_Time: 0, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 7.098451335, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 21.76648875, Processor_Interrupts_sec: 888.232495, Process_Pool_Paged Bytes: 30558784, Process_IO Read_Operations_sec: 11.48232205, Process_Working_Set_ Private: 1604808704, Process_Working_Set_Peak: 5740650496, Process_IO_Write Operations_sec: 8.287241129, Process_Page_File Bytes: 2794700800, Process_pct_ User_Time: 37.28637075, Process_Virtual_Bytes Peak: 2.49E+14, Process_Page_File Bytes Peak: 3930517504, Process_IO_Other_Bytes_sec: 4225.095128, Process_Private_Bytes: 2794700800, Process_IO_Write_Bytes_sec: 9215.811521, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 2.49E+14, Process_pct_ Processor_Time: 198.2886076, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2847384, Process_Working Set: 3172630528, Process_Page Faults_sec: 1751.004189, Process_ID Process: 0, Process_IO Other Operations_sec: 107.135057, Process_IO Data Operations_sec: 19.76956318, Process_Thread Count: 1372, Process_pct_ Privileged_Time: 161.0022369, Process_IO Data Bytes_sec: 12811.6754, Process_IO Read Bytes_sec: 3595.86388, Process_Priority Base: 0, Process_Handle Count: 51243, Network_I(Intel R _82574L_GNC)TCP_APS: 10172, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 2482.178488, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 134.7924762, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 2616.970964, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 2.496156967, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 4.992313933, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 7.4884709, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 3, Network_I(Intel R _82574L_GNC) Packets Sent sec: 2.496156967, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 4.992313933, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 145612800, Memory Free & Zero Page List Bytes: 369405952, Memory Cache Bytes Peak: 199274496, Memory System Code Resident Bytes: 0, Memory Available Bytes: 688148480, Memory Commit Limit: 5770170368, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 1257.863419, Memory Available KBytes: 672020, Memory Pages sec: 0, Memory Cache Bytes: 27987968, Memory Pool Nonpaged Bytes: 102162432, Memory Page Faults sec: 1759.191584, Memory Transition Faults sec: 540.667599, Memory System Cache Resident Bytes: 27987968, Memory Long-Term Average Standby Cache Lifetime (s): 6345, Memory Standby Cache Reserve Bytes: 16486400, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 223600640, Memory System Driver Resident Bytes: 5021696, Memory Standby Cache Normal Priority Bytes: 78655488, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 77.70862185, Memory Free System Page Table Entries: 12263398, Memory Available MBytes: 656, Memory Modified Page List Bytes: 12677120, Memory Cache Faults sec: 8.187394851, Memory Committed Bytes: 4483919872, Memory System Driver Total Bytes: 18079744, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 87904256, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 15360, LogicalDisk(_Total) pct_ Idle Time: 99.98806237, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 81.72850002, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 0.798770229, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 167268, LogicalDisk(_Total) Avg  Disk sec Write: 0.00044885, LogicalDisk(_Total) Disk Bytes sec: 12269.11072, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.011950609, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000358528, LogicalDisk(_Total) Avg  Disk Queue Length: 0.000358528, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 12269.11072, LogicalDisk(_Total) Disk Transfers sec: 0.798770229, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 15360, LogicalDisk(_Total) pct_ Disk Write Time: 0.011950609, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.00044885

[Assistant] attack


[User] date: 1-Apr-19, time:  20:57:51 , current_temperature: 31.22854633, thermostat_status: 1

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 48120, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 172.17.0.7, src_port: 51612, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.003131, src_bytes: 0, dst_bytes: 212, conn_state: SHR, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 2, dst_ip_bytes: 268, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 48146, dst_ip: 216.58.200.98, dst_port: 443, proto: tcp, service: ssl, duration: 0.089426, src_bytes: 808, dst_bytes: 263, conn_state: SF, missed_bytes: 0, src_pkts: 11, src_ip_bytes: 1388, dst_pkts: 8, dst_ip_bytes: 687, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 47, dst_ip: 192.168.1.152, dst_port: 47, proto: tcp, service: -, duration: 0.000016, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 33428, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 60, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.180, src_port: 57684, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.012936, src_bytes: 31, dst_bytes: 106, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 59, dst_pkts: 1, dst_ip_bytes: 134, dns_query: elasticsearch, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 27-Apr-19, time:  05:02:54 , temperature: 39.41873103, pressure: 1.011792632, humidity: 47.21506541

[Assistant] attack


[User] PID: 2121, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 0

[Assistant] normal


[User] PID: 1480, MINFLT: 0, MAJFLT: 0, VSTEXT: 10415, VSIZE: 537.4, RSIZE: 50612, VGROW: 0, RGROW: 0, MEM: 0.01, CMD: mysqld

[Assistant] attack


[User] date: 28-Apr-19, time:  23:43:43 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 1880, dst_ip: 192.168.1.152, dst_port: 51782, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 55506, dst_ip: 192.168.1.152, dst_port: 80, proto: tcp, service: http, duration: 0.070069, src_bytes: 239, dst_bytes: 3440, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 507, dst_pkts: 6, dst_ip_bytes: 3760, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 41183, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000017, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49456, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.015671, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2575, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: upstart-dbus-b

[Assistant] attack


[User] date: 2-Apr-19, time:    04:01:52   , fridge_temperature: 4.75, temp_condition: low

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 50110, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.000211, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 39784, dst_ip: 192.168.1.184, dst_port: 443, proto: tcp, service: -, duration: 60.933587, src_bytes: 0, dst_bytes: 0, conn_state: S3, missed_bytes: 0, src_pkts: 3, src_ip_bytes: 164, dst_pkts: 2, dst_ip_bytes: 112, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1328, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: cron

[Assistant] normal


[User] date: 28-Apr-19, time: 5:01:21, temperature: 30.82357078, pressure: -0.508500058, humidity: 22.51157284

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 55782, dst_ip: 151.101.64.233, dst_port: 443, proto: tcp, service: -, duration: 2.791395, src_bytes: 32, dst_bytes: 31, conn_state: SF, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 307, dst_pkts: 5, dst_ip_bytes: 291, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  04:37:04 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] PID: 2311, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: gnome-shell, attack: 1

[Assistant] attack


[User] PID: 2618, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: unity-panel-se, attack: 0

[Assistant] normal


[User] PID: 1400, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: irqbalance, attack: 0

[Assistant] normal


[User] date: 28-Apr-19, time:  05:14:24 , current_temperature: 31.50366359, thermostat_status: 1

[Assistant] attack


[User] Processor(_Total) DPC Rate: 0, Processor(_Total) pct_ Idle Time: 79.6875, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.104166667, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 18.22916667, Processor(_Total) pct_ C1 Time: 73.33333333, Processor(_Total) pct_ Processor Time: 20.3125, Processor(_Total) C1 Transitions sec: 101.1336529, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 2.083333333, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 61.80019529, Processor(_Total) Interrupts sec: 136.6670985, Process(_Total) Pool Paged Bytes: 10847096, Process(_Total) IO Read Operations sec: 160.867175, Process(_Total) Working Set - Private: 493735936, Process(_Total) Working Set Peak: 2424197120, Process(_Total) IO Write Operations sec: 209.7339961, Process(_Total) Page File Bytes: 1090658304, Process(_Total) pct_ User Time: 18.22916667, Process(_Total) Virtual Bytes Peak: 9490350080, Process(_Total) Page File Bytes Peak: 1460494336, Process(_Total) IO Other Bytes sec: 10182.56551, Process(_Total) Private Bytes: 1090658304, Process(_Total) IO Write Bytes sec: 35126.17767, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 8124899328, Process(_Total) pct_ Processor Time: 99.89583333, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1128512, Process(_Total) Working Set: 762630144, Process(_Total) Page Faults sec: 870.8694186, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 492.0682216, Process(_Total) IO Data Operations sec: 370.6011711, Process(_Total) Thread Count: 646, Process(_Total) pct_ Privileged Time: 81.66666667, Process(_Total) IO Data Bytes sec: 71060.95789, Process(_Total) IO Read Bytes sec: 35934.78022, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 15067, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 2783.942131, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 234.4007407, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 3018.342871, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 4.400013904, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 6.866688365, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 11.26670227, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 4.400013904, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 6.866688365, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 90951680, Memory Free & Zero Page List Bytes: 33742848, Memory Cache Bytes Peak: 52883456, Memory System Code Resident Bytes: 1155072, Memory Available Bytes: 174219264, Memory Commit Limit: 2641346560, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 51.20016179, Memory Demand Zero Faults sec: 701.4688833, Memory Available KBytes: 170136, Memory Pages sec: 195.4006175, Memory Cache Bytes: 3780608, Memory Pool Nonpaged Bytes: 58761216, Memory Page Faults sec: 913.3362195, Memory Transition Faults sec: 161.8671782, Memory System Cache Resident Bytes: 3780608, Memory Standby Cache Reserve Bytes: 3223552, Memory Page Writes sec: 0, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 78872576, Memory System Driver Resident Bytes: 3158016, Memory Standby Cache Normal Priority Bytes: 58380288, Memory Pool Paged Allocs: 61759, Memory Pool Nonpaged Allocs: 67203, Memory pct_ Committed Bytes In Use: 74.02490463, Memory Free System Page Table Entries: 33557989, Memory Available MBytes: 166, Memory Modified Page List Bytes: 376832, Memory Cache Faults sec: 2.00000632, Memory Committed Bytes: 1955254272, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 195.4006175, Memory Pool Paged Resident Bytes: 25878528, Memory Write Copies sec: 3.800012008

[Assistant] attack


[User] date: 25-Apr-19, time:  17:15:24 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] PID: 4470, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0.02, CMD: tcpdump

[Assistant] normal


[User] PID: 4721, MINFLT: 362, MAJFLT: 0, VSTEXT: 0, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: <vsftpd>

[Assistant] attack


[User] PID: 3678, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] date: 28-Apr-19, time:  07:00:48 , fridge_temperature: 10.1, temp_condition: high

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 58355, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.00309, src_bytes: 84, dst_bytes: 436, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 140, dst_pkts: 2, dst_ip_bytes: 492, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:  04:03:57 , current_temperature: 30.27922285, thermostat_status: 1

[Assistant] normal


[User] src_ip: fe80::601f:9cde:4832:2f3f, src_port: 52482, dst_ip: ff02::1:3, dst_port: 5355, proto: udp, service: dns, duration: 0.41039, src_bytes: 48, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 144, dst_pkts: 0, dst_ip_bytes: 0, dns_query: isatap, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 3790, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0.03, CMD: ostinato

[Assistant] normal


[User] date: 2-Apr-19, time:    04:05:49   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 33824, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.004538, src_bytes: 60, dst_bytes: 76, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 116, dst_pkts: 2, dst_ip_bytes: 132, dns_query: pixel.wp.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1260, TRUN: 0, TSLPI: 27, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 5, Status: -, EXC: 0, State: S, CPU: 0, CMD: mysqld

[Assistant] attack


[User] PID: 3155, MINFLT: 0, MAJFLT: 0, VSTEXT: 280, VSIZE: 711.5, RSIZE: 17052, VGROW: 0, RGROW: 0, MEM: 0, CMD: gnome-terminal

[Assistant] normal


[User] date: 2-Apr-19, time:  04:06:36 , motion_status: 0, light_status:  off

[Assistant] normal


[User] PID: 4374, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 55646, dst_ip: 18.194.169.124, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 60540, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.154578, src_bytes: 301, dst_bytes: 1919, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 569, dst_pkts: 6, dst_ip_bytes: 2239, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.180, src_port: 56881, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000551, src_bytes: 31, dst_bytes: 106, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 59, dst_pkts: 1, dst_ip_bytes: 134, dns_query: elasticsearch, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 26-Apr-19, time:  19:19:38 , FC1_Read_Input_Register: 26175, FC2_Read_Discrete_Value: 8129, FC3_Read_Holding_Register: 16343, FC4_Read_Coil: 46204

[Assistant] attack


[User] date: 2-Apr-19, time:    04:05:15   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] PID: 3676, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] PID: 3793, TRUN: 1, TSLPI: 11, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 1, CMD: drone

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 42092, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.00004, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time:    12:42:16   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] date: 28-Apr-19, time:  10:19:37 , latitude: 77.61865545, longitude: 88.20204326

[Assistant] attack


[User] date: 31-Mar-19, time: 12:40:34, temperature: 37.09612872, pressure: 1.035, humidity: 2.620063832

[Assistant] normal


[User] PID: 2994, TRUN: 0, TSLPI: 11, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0.03, CMD: node-red

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:22, FC1_Read_Input_Register: 39426, FC2_Read_Discrete_Value: 23755, FC3_Read_Holding_Register: 60868, FC4_Read_Coil: 64114

[Assistant] normal


[User] PID: 3496, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] date: 28-Apr-19, time:  09:38:33 , latitude: 82.75593331, longitude: 96.49381932

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 52654, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 0.007395, src_bytes: 147, dst_bytes: 978, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 367, dst_pkts: 4, dst_ip_bytes: 1150, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 52961, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.012446, src_bytes: 168, dst_bytes: 424, conn_state: SF, missed_bytes: 0, src_pkts: 4, src_ip_bytes: 280, dst_pkts: 2, dst_ip_bytes: 480, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 4052, MINFLT: 0, MAJFLT: 0, VSTEXT: 60, VSIZE: 17520, RSIZE: 1032, VGROW: 0, RGROW: 48, MEM: 0, CMD: systemd-hostna

[Assistant] normal


[User] PID: 1851, TRUN: 0, TSLPI: 2, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: vmtoolsd

[Assistant] normal


[User] PID: 3132, TRUN: 0, TSLPI: 22, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 5, Status: -, EXC: 0, State: S, CPU: 0, CMD: Web Content

[Assistant] attack


[User] PID: 2600, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: hud-service, attack: 0

[Assistant] normal


[User] PID: 2034, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: ssh-agent, attack: 1

[Assistant] attack


[User] PID: 3293, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 2, Status: 0, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] attack


[User] date: 28-Apr-19, time:  11:44:49 , FC1_Read_Input_Register: 48540, FC2_Read_Discrete_Value: 56135, FC3_Read_Holding_Register: 57757, FC4_Read_Coil: 15207

[Assistant] attack


[User] src_ip: 192.168.1.180, src_port: 49611, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.00133, src_bytes: 31, dst_bytes: 106, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 59, dst_pkts: 1, dst_ip_bytes: 134, dns_query: elasticsearch, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 39136, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:15, motion_status: 0, light_status:  off

[Assistant] normal


[User] date: 1-Apr-19, time:  20:32:13 , motion_status: 0, light_status:  off

[Assistant] normal


[User] PID: 4351, MINFLT: 17, MAJFLT: 0, VSTEXT: 596, VSIZE: 184.3, RSIZE: 5668, VGROW: 0, RGROW: 0, MEM: 0, CMD: apache2

[Assistant] attack


[User] date: 28-Apr-19, time:  17:22:19 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:16, motion_status: 0, light_status:  off

[Assistant] normal


[User] src_ip: 192.168.1.33, src_port: 33713, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 41672, dst_ip: 192.168.1.152, dst_port: 80, proto: tcp, service: -, duration: 6.894656, src_bytes: 3673, dst_bytes: 1661, conn_state: S3, missed_bytes: 3673, src_pkts: 4, src_ip_bytes: 216, dst_pkts: 4, dst_ip_bytes: 1877, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2433, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: dbus-daemon, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 61179, dst_ip: 192.168.1.49, dst_port: 15000, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:    04:05:43   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 50336, dst_ip: 104.74.27.78, dst_port: 443, proto: tcp, service: ssl, duration: 120.680118, src_bytes: 4598, dst_bytes: 6528, conn_state: SF, missed_bytes: 0, src_pkts: 32, src_ip_bytes: 6234, dst_pkts: 26, dst_ip_bytes: 7888, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.190, src_port: 60733, dst_ip: 156.154.68.196, dst_port: 53, proto: udp, service: dns, duration: 0.188136, src_bytes: 49, dst_bytes: 378, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 77, dst_pkts: 1, dst_ip_bytes: 406, dns_query: pdns6.ultradns.co.uk, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: T, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 42158, dst_ip: 151.101.24.134, dst_port: 443, proto: tcp, service: ssl, duration: 117.208391, src_bytes: 1377, dst_bytes: 27366, conn_state: SF, missed_bytes: 0, src_pkts: 35, src_ip_bytes: 3169, dst_pkts: 37, dst_ip_bytes: 29298, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 44936, dst_ip: 52.28.231.150, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:48, latitude: 1.958053956, longitude: 11.66412794

[Assistant] normal


[User] date: 28-Apr-19, time:  05:19:15 , motion_status: 0, light_status:  off

[Assistant] attack


[User] date: 25-Apr-19, time: 8:54:13, latitude: 69.07797748, longitude: 75.16148511

[Assistant] attack


[User] date: 31-Mar-19, time: 12:40:07, latitude: 0.420132212, longitude: 10.87540744

[Assistant] normal


[User] PID: 11047, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] PID: 2683, MINFLT: 963, MAJFLT: 1, VSTEXT: 168, VSIZE: 257.5, RSIZE: 2904, VGROW: 257.5, RGROW: 2904, MEM: 0, CMD: indicator-blue

[Assistant] normal


[User] src_ip: 2405:6e00:10ce:2c00:8520:4eba:6770:702a, src_port: 54486, dst_ip: 2a01:111:2003::52, dst_port: 80, proto: tcp, service: http, duration: 0.032978, src_bytes: 112, dst_bytes: 802, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 424, dst_pkts: 5, dst_ip_bytes: 1114, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: 1, http_method: GET, http_uri: /connecttest.txt, http_version: 1.1, http_request_body_len: 0, http_response_body_len: 22, http_status_code: 200, http_user_agent: Microsoft NCSI, http_orig_mime_types: -, http_resp_mime_types: text/plain, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 3739, MINFLT: 0, MAJFLT: 0, VSTEXT: 0, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: kworker/0:1

[Assistant] attack


[User] PID: 3293, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 2, Status: 0, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] attack


[User] date: 31-Mar-19, time:    12:42:21   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] date: 28-Apr-19, time:  11:41:12 , FC1_Read_Input_Register: 4326, FC2_Read_Discrete_Value: 21031, FC3_Read_Holding_Register: 39704, FC4_Read_Coil: 26207

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:55, current_temperature: 26.31718682, thermostat_status: 1

[Assistant] normal


[User] Processor(_Total) DPC Rate: 0, Processor(_Total) pct_ Idle Time: 87.8125, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 11.77083333, Processor(_Total) pct_ C1 Time: 86.66666667, Processor(_Total) pct_ Processor Time: 12.1875, Processor(_Total) C1 Transitions sec: 63.53301143, Processor(_Total) pct_ DPC Time: 0.104166667, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 0.416666667, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 58.59970309, Processor(_Total) Interrupts sec: 77.9996048, Process(_Total) Pool Paged Bytes: 5861560, Process(_Total) IO Read Operations sec: 2.333321511, Process(_Total) Working Set - Private: 400650240, Process(_Total) Working Set Peak: 1299165184, Process(_Total) IO Write Operations sec: 1.533325564, Process(_Total) Page File Bytes: 815636480, Process(_Total) pct_ User Time: 11.77083333, Process(_Total) Virtual Bytes Peak: 5372329984, Process(_Total) Page File Bytes Peak: 1181933568, Process(_Total) IO Other Bytes sec: 4085.5793, Process(_Total) Private Bytes: 815636480, Process(_Total) IO Write Bytes sec: 1550.925475, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 4292136960, Process(_Total) pct_ Processor Time: 99.89583333, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 855136, Process(_Total) Working Set: 623394816, Process(_Total) Page Faults sec: 265.731987, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 138.3326324, Process(_Total) IO Data Operations sec: 3.866647076, Process(_Total) Thread Count: 518, Process(_Total) pct_ Privileged Time: 88.125, Process(_Total) IO Data Bytes sec: 3088.117687, Process(_Total) IO Read Bytes sec: 1537.192212, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 12983, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 3541.982054, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 186.4657219, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 3728.447776, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 3.466649102, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 7.19996352, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 10.66661262, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 3.466649102, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 7.19996352, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 103518208, Memory Free & Zero Page List Bytes: 194023424, Memory Cache Bytes Peak: 58441728, Memory System Code Resident Bytes: 991232, Memory Available Bytes: 539164672, Memory Commit Limit: 2641346560, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 274.2652771, Memory Available KBytes: 526528, Memory Pages sec: 0, Memory Cache Bytes: 27910144, Memory Pool Nonpaged Bytes: 59875328, Memory Page Faults sec: 277.7319262, Memory Transition Faults sec: 3.999979733, Memory System Cache Resident Bytes: 27910144, Memory Standby Cache Reserve Bytes: 216383488, Memory Page Writes sec: 0, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 45899776, Memory System Driver Resident Bytes: 3457024, Memory Standby Cache Normal Priority Bytes: 82857984, Memory Pool Paged Allocs: 77484, Memory Pool Nonpaged Allocs: 64184, Memory pct_ Committed Bytes In Use: 44.22494805, Memory Free System Page Table Entries: 33560173, Memory Available MBytes: 514, Memory Modified Page List Bytes: 6590464, Memory Cache Faults sec: 0.466664302, Memory Committed Bytes: 1168134144, Memory System Driver Total Bytes: 5857280, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 43081728, Memory Write Copies sec: 0

[Assistant] attack


[User] date: 31-Mar-19, time: 12:38:01, motion_status: 0, light_status:  off

[Assistant] normal


[User] PID: 4152, TRUN: 0, TSLPI: 0, TSLPU: 0, POLI: -, NICE: 0, PRI: 0, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: E, CPU: 0, CMD: <vsftpd>

[Assistant] attack


[User] date: 25-Apr-19, time: 8:47:48, temperature: 39.91944399, pressure: -6.380382358, humidity: 50.1644171

[Assistant] attack


[User] PID: 1368, RDDSK: 248, WRDSK: 0, WCANCL: 0, DSK: 0.16, CMD: vmtoolsd, attack: 1

[Assistant] attack


[User] date: 28-Apr-19, time:  08:21:49 , temperature: 31.72169222, pressure: -0.651386574, humidity: 71.83327339

[Assistant] attack


[User] date: 25-Apr-19, time:  17:09:52 , fridge_temperature: 4.05, temp_condition: low

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 59338, dst_ip: 172.217.25.166, dst_port: 443, proto: tcp, service: ssl, duration: 11.85712, src_bytes: 2669, dst_bytes: 318685, conn_state: SF, missed_bytes: 24258, src_pkts: 65, src_ip_bytes: 6023, dst_pkts: 225, dst_ip_bytes: 306250, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time:    12:40:57   , fridge_temperature: 8.7, temp_condition: high

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 50825, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000044, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 56, dst_ip: 192.168.1.193, dst_port: 56, proto: tcp, service: -, duration: 0.000013, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 25-Apr-19, time:  15:35:07 , fridge_temperature: 7, temp_condition: high

[Assistant] attack


[User] PID: 3675, TRUN: 1, TSLPI: 0, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: R, CPU: 0.01, CMD: atop

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:09, motion_status: 1, light_status:  on

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 20, dst_ip: 192.168.1.190, dst_port: 20, proto: tcp, service: -, duration: 0.000171, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 34424, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.002625, src_bytes: 155, dst_bytes: 651, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 423, dst_pkts: 5, dst_ip_bytes: 919, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 59190, dst_ip: 192.168.1.184, dst_port: 21, proto: tcp, service: -, duration: 0.000009, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 60, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1663, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: haveged, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 58652, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.379763, src_bytes: 608, dst_bytes: 1920, conn_state: S2, missed_bytes: 1920, src_pkts: 4, src_ip_bytes: 824, dst_pkts: 2, dst_ip_bytes: 112, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3119, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 10, PRI: 130, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: update-manager

[Assistant] normal


[User] PID: 3896, RDDSK: 0, WRDSK: 8, WCANCL: 0, DSK: 0.17, CMD: atop, attack: 1

[Assistant] attack


[User] date: 2-Apr-19, time:  00:20:32 , current_temperature: 29.768276, thermostat_status: 1

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 77.04442038, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.078248362, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 18.31011681, Processor_pct_ C1_Time: 77.04442038, Processor_pct_ Processor_Time: 21.59514082, Processor_C1_ransitions_sec: 177.1777048, Processor_pct_ DPC_Time: 0.234745087, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 3.286431223, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 30.1472522, Processor_Interrupts_sec: 535.0386088, Process_Pool_Paged Bytes: 27144888, Process_IO Read_Operations_sec: 3.605651426, Process_Working_Set_ Private: 1322786816, Process_Working_Set_Peak: 5588217856, Process_IO_Write Operations_sec: 0.100156984, Process_Page_File Bytes: 2998472704, Process_pct_ User_Time: 36.62023363, Process_Virtual_Bytes Peak: 1.68E+14, Process_Page_File Bytes Peak: 3998035968, Process_IO_Other_Bytes_sec: 5418.592994, Process_Private_Bytes: 2998472704, Process_IO_Write_Bytes_sec: 6563.888107, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.68E+14, Process_pct_ Processor_Time: 199.3768275, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 3107464, Process_Working Set: 2247950336, Process_Page Faults_sec: 542.4502256, Process_ID Process: 0, Process_IO Other Operations_sec: 64.40094075, Process_IO Data Operations_sec: 3.70580841, Process_Thread Count: 1103, Process_pct_ Privileged_Time: 162.7565939, Process_IO Data Bytes_sec: 7490.340209, Process_IO Read Bytes_sec: 926.4521025, Process_Priority Base: 0, Process_Handle Count: 48284, Network_I(Intel R _82574L_GNC)TCP_APS: 9499, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 7496.249471, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 511.6018745, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 8007.851346, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 9.414756501, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 14.82323364, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 24.23799014, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 12, Network_I(Intel R _82574L_GNC) Packets Sent sec: 9.414756501, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 14.82323364, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 111521792, Memory Free & Zero Page List Bytes: 553811968, Memory Cache Bytes Peak: 77492224, Memory System Code Resident Bytes: 2789376, Memory Available Bytes: 1110917120, Memory Commit Limit: 5195681792, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 622.8762838, Memory Available KBytes: 1084880, Memory Pages sec: 0, Memory Cache Bytes: 19656704, Memory Pool Nonpaged Bytes: 90300416, Memory Page Faults sec: 544.2530513, Memory Transition Faults sec: 5.208163171, Memory System Cache Resident Bytes: 19656704, Memory Long-Term Average Standby Cache Lifetime (s): 320, Memory Standby Cache Reserve Bytes: 358260736, Memory Page Writes sec: 0, Memory System Code Total Bytes: 4419584, Memory Standby Cache Core Bytes: 147255296, Memory System Driver Resident Bytes: 3198976, Memory Standby Cache Normal Priority Bytes: 51589120, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 69.61576756, Memory Free System Page Table Entries: 12255279, Memory Available MBytes: 1059, Memory Modified Page List Bytes: 48209920, Memory Cache Faults sec: 1.802825713, Memory Committed Bytes: 3617013760, Memory System Driver Total Bytes: 19488768, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 79073280, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 31744, LogicalDisk(_Total) pct_ Idle Time: 99.98730098, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 83.37999541, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 0.400627936, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 170648, LogicalDisk(_Total) Avg  Disk sec Write: 0.000973, LogicalDisk(_Total) Disk Bytes sec: 12717.53321, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.012994486, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000389815, LogicalDisk(_Total) Avg  Disk Queue Length: 0.000389815, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 12717.53321, LogicalDisk(_Total) Disk Transfers sec: 0.400627936, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 31744, LogicalDisk(_Total) pct_ Disk Write Time: 0.012993485, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000973

[Assistant] normal


[User] PID: 3197, TRUN: 0, TSLPI: 63, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: firefox

[Assistant] normal


[User] src_ip: 172.17.0.5, src_port: 43705, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.001702, src_bytes: 0, dst_bytes: 178, conn_state: SHR, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 2, dst_ip_bytes: 234, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 3675, MINFLT: 2072, MAJFLT: 0, VSTEXT: 148, VSIZE: 17948, RSIZE: 2604, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 51354, dst_ip: 52.59.177.21, dst_port: 80, proto: tcp, service: http, duration: 1.42949, src_bytes: 496, dst_bytes: 12183, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 764, dst_pkts: 12, dst_ip_bytes: 12815, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] Processor_DPC_Rate: 1, Processor_pct_ Idle_Time: 72.07166169, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 25.54794648, Processor_pct_ C1_Time: 72.07166169, Processor_pct_ Processor_Time: 26.87193301, Processor_C1_ransitions_sec: 132.8059351, Processor_pct_ DPC_Time: 0.078128277, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 1.328180704, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 32.8014659, Processor_Interrupts_sec: 670.0299436, Process_Pool_Paged Bytes: 22015072, Process_IO Read_Operations_sec: 0, Process_Working_Set_ Private: 1690947584, Process_Working_Set_Peak: 5894324224, Process_IO_Write Operations_sec: 0.100004469, Process_Page_File Bytes: 3188768768, Process_pct_ User_Time: 51.09589296, Process_Virtual_Bytes Peak: 1.52E+14, Process_Page_File Bytes Peak: 4214636544, Process_IO_Other_Bytes_sec: 2756.023167, Process_Private_Bytes: 3188768768, Process_IO_Write_Bytes_sec: 3544.158388, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.52E+14, Process_pct_ Processor_Time: 199.8521318, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2396232, Process_Working Set: 1917259776, Process_Page Faults_sec: 717.2320531, Process_ID Process: 0, Process_IO Other Operations_sec: 50.0022346, Process_IO Data Operations_sec: 0.100004469, Process_Thread Count: 974, Process_pct_ Privileged_Time: 148.7562388, Process_IO Data Bytes_sec: 3544.158388, Process_IO Read Bytes_sec: 0, Process_Priority Base: 0, Process_Handle Count: 38369, Network_I(Intel R _82574L_GNC)TCP_APS: 5262, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 5374.940206, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 275.4123082, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5650.352514, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 5.100227929, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 10.30046033, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 15.40068826, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 2, Network_I(Intel R _82574L_GNC) Packets Sent sec: 5.100227929, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 10.30046033, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 103464960, Memory Free & Zero Page List Bytes: 2662400, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 541659136, Memory Commit Limit: 8473149440, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0.200008938, Memory Demand Zero Faults sec: 925.241349, Memory Available KBytes: 528964, Memory Pages sec: 1.600071507, Memory Cache Bytes: 1576960, Memory Pool Nonpaged Bytes: 94281728, Memory Page Faults sec: 717.2320531, Memory Transition Faults sec: 27.10121115, Memory System Cache Resident Bytes: 1576960, Memory Long-Term Average Standby Cache Lifetime (s): 1491, Memory Standby Cache Reserve Bytes: 180555776, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 186888192, Memory System Driver Resident Bytes: 1.76E+13, Memory Standby Cache Normal Priority Bytes: 171552768, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 47.48955833, Memory Free System Page Table Entries: 12210161, Memory Available MBytes: 516, Memory Modified Page List Bytes: 16769024, Memory Cache Faults sec: 0, Memory Committed Bytes: 4023861248, Memory System Driver Total Bytes: 18202624, Memory Pages Input sec: 1.600071507, Memory Pool Paged Resident Bytes: 37539840, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 9362.285714, LogicalDisk(_Total) pct_ Idle Time: 99.97321788, LogicalDisk(_Total) Disk Reads sec: 0.200008938, LogicalDisk(_Total) pct_ Free Space: 81.3048768, LogicalDisk(_Total) Disk Read Bytes sec: 6553.892893, LogicalDisk(_Total) Avg  Disk sec Read: 0.00122, LogicalDisk(_Total) Disk Writes sec: 0.700031284, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 166401, LogicalDisk(_Total) Avg  Disk sec Write: 0.000779029, LogicalDisk(_Total) Disk Bytes sec: 13107.78579, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.00024401, LogicalDisk(_Total) pct_ Disk Time: 0.026311103, LogicalDisk(_Total) Avg  Disk Bytes Read: 32768, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000545343, LogicalDisk(_Total) Avg  Disk Queue Length: 0.000789353, LogicalDisk(_Total) pct_ Disk Read Time: 0.008133341, LogicalDisk(_Total) Disk Write Bytes sec: 6553.892893, LogicalDisk(_Total) Disk Transfers sec: 0.900040223, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 14563.55556, LogicalDisk(_Total) pct_ Disk Write Time: 0.018177762, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000877022

[Assistant] normal


[User] PID: 1517, MINFLT: 0, MAJFLT: 0, VSTEXT: 531, VSIZE: 394.6, RSIZE: 35528, VGROW: 0, RGROW: 0, MEM: 0.01, CMD: named

[Assistant] attack


[User] date: 2-Apr-19, time:  04:06:42 , current_temperature: 30.20460313, thermostat_status: 0

[Assistant] normal


[User] PID: 2793, MINFLT: 0, MAJFLT: 0, VSTEXT: 38, VSIZE: 324.1, RSIZE: 3736, VGROW: 0, RGROW: 24, MEM: 0, CMD: polit-gnome-a

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 44842, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.003353, src_bytes: 170, dst_bytes: 2938, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 438, dst_pkts: 7, dst_ip_bytes: 3310, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 25-Apr-19, time: 9:24:06, motion_status: 0, light_status:  off

[Assistant] attack


[User] PID: 2547, MINFLT: 0, MAJFLT: 0, VSTEXT: 66, VSIZE: 710.1, RSIZE: 14432, VGROW: 0, RGROW: 0, MEM: 0, CMD: unity-panel-se

[Assistant] normal


[User] PID: 3678, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 32990, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 125.465123, src_bytes: 2311, dst_bytes: 3350, conn_state: RSTR, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 2571, dst_pkts: 7, dst_ip_bytes: 3642, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] Processor(_Total) DPC Rate: 7, Processor(_Total) pct_ Idle Time: 94.0625, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.104166667, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 0, Processor(_Total) pct_ C1 Time: 93.33333333, Processor(_Total) pct_ Processor Time: 5.9375, Processor(_Total) C1 Transitions sec: 158.6573366, Processor(_Total) pct_ DPC Time: 5.833333333, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 5.9375, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 118.1263867, Processor(_Total) Interrupts sec: 181.6559841, Process(_Total) Pool Paged Bytes: 6396456, Process(_Total) IO Read Operations sec: 0.133325493, Process(_Total) Working Set - Private: 167174144, Process(_Total) Working Set Peak: 1154473984, Process(_Total) IO Write Operations sec: 6.466286406, Process(_Total) Page File Bytes: 621064192, Process(_Total) pct_ User Time: 0, Process(_Total) Virtual Bytes Peak: 5360701440, Process(_Total) Page File Bytes Peak: 885444608, Process(_Total) IO Other Bytes sec: 1447.1149, Process(_Total) Private Bytes: 621064192, Process(_Total) IO Write Bytes sec: 108132.5744, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 4539219968, Process(_Total) pct_ Processor Time: 94.0625, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 933064, Process(_Total) Working Set: 514793472, Process(_Total) Page Faults sec: 1.199929436, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 50.73035005, Process(_Total) IO Data Operations sec: 6.599611899, Process(_Total) Thread Count: 527, Process(_Total) pct_ Privileged Time: 94.0625, Process(_Total) IO Data Bytes sec: 108133.7743, Process(_Total) IO Read Bytes sec: 1.199929436, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 14079, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 16920.20498, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 13861.18487, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 30781.38985, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 256.4515856, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 262.651221, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 519.1028066, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 256.4515856, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 262.651221, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 102727680, Memory Free & Zero Page List Bytes: 32702464, Memory Cache Bytes Peak: 135745536, Memory System Code Resident Bytes: 2277376, Memory Available Bytes: 547201024, Memory Commit Limit: 2146951168, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 5.399682463, Memory Available KBytes: 534376, Memory Pages sec: 0, Memory Cache Bytes: 12005376, Memory Pool Nonpaged Bytes: 61038592, Memory Page Faults sec: 5.533007956, Memory Transition Faults sec: 0.533301972, Memory System Cache Resident Bytes: 12005376, Memory Standby Cache Reserve Bytes: 464060416, Memory Page Writes sec: 0, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 30130176, Memory System Driver Resident Bytes: 3567616, Memory Standby Cache Normal Priority Bytes: 20307968, Memory Pool Paged Allocs: 87756, Memory Pool Nonpaged Allocs: 74378, Memory pct_ Committed Bytes In Use: 44.98433678, Memory Free System Page Table Entries: 33557896, Memory Available MBytes: 521, Memory Modified Page List Bytes: 24043520, Memory Cache Faults sec: 0, Memory Committed Bytes: 965791744, Memory System Driver Total Bytes: 5832704, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 32096256, Memory Write Copies sec: 0

[Assistant] normal


[User] date: 25-Apr-19, time: 9:08:51, current_temperature: 27.76936964, thermostat_status: 1

[Assistant] attack


[User] src_ip: 192.168.1.180, src_port: 59019, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.025373, src_bytes: 41, dst_bytes: 89, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 69, dst_pkts: 1, dst_ip_bytes: 117, dns_query: elasticsearch.mydns.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 2575, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: upstart-dbus-b, attack: 1

[Assistant] attack


[User] PID: 2499, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: 0, EXC: 0, State: S, CPU: 0.01, CMD: dbus-daemon

[Assistant] attack


[User] src_ip: 172.17.0.7, src_port: 41338, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000613, src_bytes: 0, dst_bytes: 178, conn_state: SHR, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 2, dst_ip_bytes: 234, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 90.12988919, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.46911292, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 5.472984065, Processor_pct_ C1_Time: 90.12988919, Processor_pct_ Processor_Time: 7.428383821, Processor_C1_ransitions_sec: 217.4900929, Processor_pct_ DPC_Time: 0, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 1.876451679, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 21.51880808, Processor_Interrupts_sec: 380.9329468, Process_Pool_Paged Bytes: 30615568, Process_IO Read_Operations_sec: 7.706735918, Process_Working_Set_ Private: 1720983552, Process_Working_Set_Peak: 5524717568, Process_IO_Write Operations_sec: 8.107085836, Process_Page_File Bytes: 2810417152, Process_pct_ User_Time: 10.94596813, Process_Virtual_Bytes Peak: 2.51E+14, Process_Page_File Bytes Peak: 3625074688, Process_IO_Other_Bytes_sec: 4040.531546, Process_Private_Bytes: 2810417152, Process_IO_Write_Bytes_sec: 9034.696596, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 2.51E+14, Process_pct_ Processor_Time: 199.21662, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2819784, Process_Working Set: 3675447296, Process_Page Faults_sec: 1242.986407, Process_ID Process: 0, Process_IO Other Operations_sec: 91.07960631, Process_IO Data Operations_sec: 15.81382175, Process_Thread Count: 1383, Process_pct_ Privileged_Time: 188.2706518, Process_IO Data Bytes_sec: 11510.06014, Process_IO Read Bytes_sec: 2475.363542, Process_Priority Base: 0, Process_Handle Count: 51263, Network_I(Intel R _82574L_GNC)TCP_APS: 10308, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 2471.259955, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 145.9275451, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 2617.1875, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 2.702361945, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 4.503936576, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 7.206298521, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 3, Network_I(Intel R _82574L_GNC) Packets Sent sec: 2.702361945, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 4.503936576, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 147120128, Memory Free & Zero Page List Bytes: 79757312, Memory Cache Bytes Peak: 199274496, Memory System Code Resident Bytes: 0, Memory Available Bytes: 518062080, Memory Commit Limit: 5770170368, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 731.4392999, Memory Available KBytes: 505920, Memory Pages sec: 0, Memory Cache Bytes: 30638080, Memory Pool Nonpaged Bytes: 101138432, Memory Page Faults sec: 1242.986407, Memory Transition Faults sec: 545.877113, Memory System Cache Resident Bytes: 30638080, Memory Long-Term Average Standby Cache Lifetime (s): 8440, Memory Standby Cache Reserve Bytes: 136171520, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 197349376, Memory System Driver Resident Bytes: 5234688, Memory Standby Cache Normal Priority Bytes: 104783872, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 76.96163856, Memory Free System Page Table Entries: 12263394, Memory Available MBytes: 494, Memory Modified Page List Bytes: 10530816, Memory Cache Faults sec: 0, Memory Committed Bytes: 4440817664, Memory System Driver Total Bytes: 18079744, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 88313856, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 17554.28571, LogicalDisk(_Total) pct_ Idle Time: 99.98159977, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 81.74608991, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 0.700612356, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 167304, LogicalDisk(_Total) Avg  Disk sec Write: 0.000361186, LogicalDisk(_Total) Disk Bytes sec: 12298.74948, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.008433524, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000253026, LogicalDisk(_Total) Avg  Disk Queue Length: 0.000253026, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 12298.74948, LogicalDisk(_Total) Disk Transfers sec: 0.700612356, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 17554.28571, LogicalDisk(_Total) pct_ Disk Write Time: 0.008434525, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000361186

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 40476, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.002605, src_bytes: 167, dst_bytes: 2924, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 435, dst_pkts: 7, dst_ip_bytes: 3296, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 38421, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000056, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 33899, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.362963, src_bytes: 90, dst_bytes: 474, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 146, dst_pkts: 2, dst_ip_bytes: 530, dns_query: shavar.services.mozilla.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 50406, dst_ip: 13.35.148.144, dst_port: 80, proto: tcp, service: http, duration: 115.3263, src_bytes: 880, dst_bytes: 1941, conn_state: SF, missed_bytes: 0, src_pkts: 19, src_ip_bytes: 1876, dst_pkts: 16, dst_ip_bytes: 2781, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 4374, MINFLT: 2234, MAJFLT: 0, VSTEXT: 148, VSIZE: 17644, RSIZE: 2424, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] Processor(_Total) DPC Rate: 0, Processor(_Total) pct_ Idle Time: 99.79166667, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 0.208333333, Processor(_Total) pct_ C1 Time: 100, Processor(_Total) pct_ Processor Time: 0.208333333, Processor(_Total) C1 Transitions sec: 66.47104932, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 0, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 3.266882063, Processor(_Total) Interrupts sec: 69.0045497, Process(_Total) Pool Paged Bytes: 5446936, Process(_Total) IO Read Operations sec: 7.067132626, Process(_Total) Working Set - Private: 210259968, Process(_Total) Working Set Peak: 1019584512, Process(_Total) IO Write Operations sec: 1.066737, Process(_Total) Page File Bytes: 595476480, Process(_Total) pct_ User Time: 0.208333333, Process(_Total) Virtual Bytes Peak: 4748652544, Process(_Total) Page File Bytes Peak: 805773312, Process(_Total) IO Other Bytes sec: 1337.554856, Process(_Total) Private Bytes: 595476480, Process(_Total) IO Write Bytes sec: 213.8807685, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 3962630144, Process(_Total) pct_ Processor Time: 100, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 780104, Process(_Total) Working Set: 441073664, Process(_Total) Page Faults sec: 9.000593439, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 55.20363976, Process(_Total) IO Data Operations sec: 8.133869626, Process(_Total) Thread Count: 465, Process(_Total) pct_ Privileged Time: 99.79166667, Process(_Total) IO Data Bytes sec: 468.164201, Process(_Total) IO Read Bytes sec: 254.2834324, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 11913, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 314.0207044, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 44.93629613, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 358.9570006, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 0.400026375, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 2.533500375, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 2.933526751, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 0.400026375, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 2.533500375, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 103727104, Memory Free & Zero Page List Bytes: 126763008, Memory Cache Bytes Peak: 80883712, Memory System Code Resident Bytes: 1609728, Memory Available Bytes: 486322176, Memory Commit Limit: 2146951168, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 10.40068575, Memory Available KBytes: 474924, Memory Pages sec: 0, Memory Cache Bytes: 21041152, Memory Pool Nonpaged Bytes: 55640064, Memory Page Faults sec: 14.60096269, Memory Transition Faults sec: 4.800316501, Memory System Cache Resident Bytes: 21041152, Memory Standby Cache Reserve Bytes: 154480640, Memory Page Writes sec: 0, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 77406208, Memory System Driver Resident Bytes: 3473408, Memory Standby Cache Normal Priority Bytes: 127672320, Memory Pool Paged Allocs: 85667, Memory Pool Nonpaged Allocs: 60527, Memory pct_ Committed Bytes In Use: 43.96746782, Memory Free System Page Table Entries: 33557962, Memory Available MBytes: 463, Memory Modified Page List Bytes: 29548544, Memory Cache Faults sec: 0, Memory Committed Bytes: 943960064, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 48041984, Memory Write Copies sec: 0

[Assistant] normal


[User] date: 2-Apr-19, time:    04:05:51   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] date: 31-Mar-19, time:    12:43:44   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49236, dst_ip: 192.168.1.37, dst_port: 4444, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 392, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2122, RDDSK: 0, WRDSK: 4, WCANCL: 0, DSK: 0.03, CMD: apache2, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 49616, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 23.256551, src_bytes: 3184, dst_bytes: 1512, conn_state: S3, missed_bytes: 0, src_pkts: 8, src_ip_bytes: 3620, dst_pkts: 6, dst_ip_bytes: 1896, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 54500, dst_ip: 101.119.11.11, dst_port: 80, proto: tcp, service: http, duration: 115.980179, src_bytes: 435, dst_bytes: 795, conn_state: SF, missed_bytes: 0, src_pkts: 18, src_ip_bytes: 1379, dst_pkts: 16, dst_ip_bytes: 1643, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1328, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: cron

[Assistant] normal


[User] src_ip: 192.168.1.6, src_port: 5353, dst_ip: 224.0.0.251, dst_port: 5353, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 89, dst_pkts: 0, dst_ip_bytes: 0, dns_query: _googlecast._tcp.local, dns_qclass: 1, dns_qtype: 12, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 26-Apr-19, time:  14:22:20 , motion_status: 1, light_status:  on

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 51302, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.00299, src_bytes: 168, dst_bytes: 436, conn_state: SF, missed_bytes: 0, src_pkts: 4, src_ip_bytes: 280, dst_pkts: 2, dst_ip_bytes: 492, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3752, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: gnome-terminal, attack: 0

[Assistant] normal