[User] Processor_DPC_Rate: 6, Processor_pct_ Idle_Time: 63.87169476, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.23438363, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 15.00055232, Processor_pct_ C1_Time: 63.87169476, Processor_pct_ Processor_Time: 34.91947874, Processor_C1_ransitions_sec: 331.0003442, Processor_pct_ DPC_Time: 1.484429657, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 19.92260855, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 274.4002854, Processor_Interrupts_sec: 1051.901094, Process_Pool_Paged Bytes: 27682048, Process_IO Read_Operations_sec: 53.60005574, Process_Working_Set_ Private: 694616064, Process_Working_Set_Peak: 3972325376, Process_IO_Write Operations_sec: 45.40004722, Process_Page_File Bytes: 2071552000, Process_pct_ User_Time: 30.00110464, Process_Virtual_Bytes Peak: 2.51E+14, Process_Page_File Bytes Peak: 2753372160, Process_IO_Other_Bytes_sec: 78695.08184, Process_Private_Bytes: 2071552000, Process_IO_Write_Bytes_sec: 31626.03289, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 2.51E+14, Process_pct_ Processor_Time: 196.5697377, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2638168, Process_Working Set: 2320019456, Process_Page Faults_sec: 1758.001828, Process_ID Process: 0, Process_IO Other Operations_sec: 3658.003804, Process_IO Data Operations_sec: 99.00010296, Process_Thread Count: 1447, Process_pct_ Privileged_Time: 166.5686331, Process_IO Data Bytes_sec: 42967.04469, Process_IO Read Bytes_sec: 11341.01179, Process_Priority Base: 0, Process_Handle Count: 50494, Network_I(Intel R _82574L_GNC)TCP_APS: 8469, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 13159.11369, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 34858.63625, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 48017.74994, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 123.2001281, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 143.300149, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 266.5002772, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 7, Network_I(Intel R _82574L_GNC) Packets Sent sec: 123.2001281, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 143.300149, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 192475136, Memory Free & Zero Page List Bytes: 236740608, Memory Cache Bytes Peak: 73678848, Memory System Code Resident Bytes: 0, Memory Available Bytes: 750215168, Memory Commit Limit: 6038605824, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 2.400002496, Memory Demand Zero Faults sec: 999.3010393, Memory Available KBytes: 732632, Memory Pages sec: 8.800009152, Memory Cache Bytes: 62504960, Memory Pool Nonpaged Bytes: 125005824, Memory Page Faults sec: 1827.4019, Memory Transition Faults sec: 807.4008397, Memory System Cache Resident Bytes: 62504960, Memory Long-Term Average Standby Cache Lifetime (s): 3730, Memory Standby Cache Reserve Bytes: 57659392, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 217468928, Memory System Driver Resident Bytes: 3883008, Memory Standby Cache Normal Priority Bytes: 238346240, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 72.750224, Memory Free System Page Table Entries: 12262910, Memory Available MBytes: 715, Memory Modified Page List Bytes: 19521536, Memory Cache Faults sec: 64.70006729, Memory Committed Bytes: 4393099264, Memory System Driver Total Bytes: 19177472, Memory Pages Input sec: 8.800009152, Memory Pool Paged Resident Bytes: 164536320, Memory Write Copies sec: 0.400000416, LogicalDisk(_Total) Avg  Disk Bytes Write: 13153.44516, LogicalDisk(_Total) pct_ Idle Time: 99.86067687, LogicalDisk(_Total) Disk Reads sec: 0.900000936, LogicalDisk(_Total) pct_ Free Space: 81.52377323, LogicalDisk(_Total) Disk Read Bytes sec: 29900.8311, LogicalDisk(_Total) Avg  Disk sec Read: 0.001102544, LogicalDisk(_Total) Disk Writes sec: 15.50001612, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.400000416, LogicalDisk(_Total) Free Megabytes: 166849, LogicalDisk(_Total) Avg  Disk sec Write: 0.000215385, LogicalDisk(_Total) Disk Bytes sec: 233779.4431, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.000992327, LogicalDisk(_Total) pct_ Disk Time: 0.144364315, LogicalDisk(_Total) Avg  Disk Bytes Read: 33223.11111, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.003338593, LogicalDisk(_Total) Avg  Disk Queue Length: 0.004330919, LogicalDisk(_Total) pct_ Disk Read Time: 0.033077218, LogicalDisk(_Total) Disk Write Bytes sec: 203878.612, LogicalDisk(_Total) Disk Transfers sec: 16.40001706, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 14254.82927, LogicalDisk(_Total) pct_ Disk Write Time: 0.111286098, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000264071

[Assistant] attack


[User] PID: 2533, MINFLT: 10, MAJFLT: 2, VSTEXT: 589, VSIZE: 640.3, RSIZE: 15324, VGROW: 0, RGROW: 256, MEM: 0, CMD: hud-service

[Assistant] normal


[User] PID: 2700, MINFLT: 0, MAJFLT: 0, VSTEXT: 659, VSIZE: 1.1, RSIZE: 12168, VGROW: 0, RGROW: 0, MEM: 0, CMD: indicator-date

[Assistant] attack


[User] PID: 3273, MINFLT: 0, MAJFLT: 0, VSTEXT: 18, VSIZE: 368.9, RSIZE: 3884, VGROW: 0, RGROW: 0, MEM: 0, CMD: deja-dup-monit

[Assistant] attack


[User] date: 28-Apr-19, time: 21:16:17, motion_status: 0, light_status:  off

[Assistant] attack


[User] src_ip: 192.168.1.195, src_port: 51994, dst_ip: 192.168.1.1, dst_port: 41952, proto: tcp, service: http, duration: 0.537133, src_bytes: 383, dst_bytes: 3882, conn_state: SF, missed_bytes: 0, src_pkts: 10, src_ip_bytes: 795, dst_pkts: 12, dst_ip_bytes: 4374, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 1-Apr-19, time:  20:24:04 , current_temperature: 27.89547028, thermostat_status: 1

[Assistant] normal


[User] PID: 11745, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] date: 2-Apr-19, time:  00:08:45 , current_temperature: 27.245728, thermostat_status: 1

[Assistant] normal


[User] date: 26-Apr-19, time:  15:16:24 , temperature: 42.72801974, pressure: 2.304789995, humidity: 9.647569769

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 51902, dst_ip: 52.59.177.21, dst_port: 80, proto: tcp, service: http, duration: 1.379042, src_bytes: 614, dst_bytes: 12183, conn_state: SF, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 934, dst_pkts: 12, dst_ip_bytes: 12815, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1498, MINFLT: 0, MAJFLT: 0, VSTEXT: 148, VSIZE: 280.7, RSIZE: 6148, VGROW: 0, RGROW: 0, MEM: 0, CMD: accounts-daemo

[Assistant] attack


[User] date: 25-Apr-19, time:  16:23:05 , latitude: 53.78923661, longitude: 64.48720664

[Assistant] attack


[User] PID: 4680, TRUN: 0, TSLPI: 0, TSLPU: 0, POLI: 0, NICE: 0, PRI: 0, RTPR: 0, CPUNR: 0, Status: NE, EXC: 0, State: E, CPU: 0, CMD: <nm-dhcp-clie>

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 53927, dst_ip: 192.168.1.49, dst_port: 4224, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 11, dst_ip: 192.168.1.152, dst_port: 11, proto: tcp, service: -, duration: 0.000001, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3675, MINFLT: 2072, MAJFLT: 0, VSTEXT: 148, VSIZE: 17948, RSIZE: 2604, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] date: 31-Mar-19, time:    12:41:39   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] PID: 1452, MINFLT: 0, MAJFLT: 0, VSTEXT: 148, VSIZE: 280.7, RSIZE: 1840, VGROW: 0, RGROW: 4, MEM: 0, CMD: accounts-daemo

[Assistant] normal


[User] PID: 2978, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vmtoolsd, attack: 1

[Assistant] attack


[User] PID: 1134, RDDSK: 0, WRDSK: 8, WCANCL: 0, DSK: 0.03, CMD: vsftpd, attack: 0

[Assistant] normal


[User] Processor(_Total) DPC Rate: 2, Processor(_Total) pct_ Idle Time: 84.16666667, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 0.729166667, Processor(_Total) pct_ C1 Time: 80, Processor(_Total) pct_ Processor Time: 15.83333333, Processor(_Total) C1 Transitions sec: 2829.11712, Processor(_Total) pct_ DPC Time: 0.625, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 15.10416667, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 2460.669929, Processor(_Total) Interrupts sec: 3600.876324, Process(_Total) Pool Paged Bytes: 8030616, Process(_Total) IO Read Operations sec: 2.133220571, Process(_Total) Working Set - Private: 803295232, Process(_Total) Working Set Peak: 2015457280, Process(_Total) IO Write Operations sec: 1.599915428, Process(_Total) Page File Bytes: 2030915584, Process(_Total) pct_ User Time: 0.729166667, Process(_Total) Virtual Bytes Peak: 8142172160, Process(_Total) Page File Bytes Peak: 2679234560, Process(_Total) IO Other Bytes sec: 6646.115353, Process(_Total) Private Bytes: 2030915584, Process(_Total) IO Write Bytes sec: 5157.660699, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6833995776, Process(_Total) pct_ Processor Time: 99.375, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1065528, Process(_Total) Working Set: 861097984, Process(_Total) Page Faults sec: 3089.903334, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 344.7151117, Process(_Total) IO Data Operations sec: 3.733136, Process(_Total) Thread Count: 567, Process(_Total) pct_ Privileged Time: 98.64583333, Process(_Total) IO Data Bytes sec: 5397.114709, Process(_Total) IO Read Bytes sec: 239.4540091, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13908, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 152.3252814, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 108.727586, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 261.0528674, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 1.399926, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 1.799904857, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 3.199830857, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 1.399926, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 1.799904857, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 92762112, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 765952, Memory Available Bytes: 561152, Memory Commit Limit: 2918703104, Memory Transition Pages RePurposed sec: 3994.45552, Memory Pages Output sec: 1885.966974, Memory Page Reads sec: 2296.011966, Memory Demand Zero Faults sec: 82.39564457, Memory Available KBytes: 548, Memory Pages sec: 6420.460614, Memory Cache Bytes: 339968, Memory Pool Nonpaged Bytes: 52465664, Memory Page Faults sec: 3188.964765, Memory Transition Faults sec: 814.0236374, Memory System Cache Resident Bytes: 339968, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 189.1233363, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 303104, Memory System Driver Resident Bytes: 1335296, Memory Standby Cache Normal Priority Bytes: 258048, Memory Pool Paged Allocs: 58860, Memory Pool Nonpaged Allocs: 51768, Memory pct_ Committed Bytes In Use: 81.50311406, Memory Free System Page Table Entries: 33562140, Memory Available MBytes: 0, Memory Modified Page List Bytes: 49152, Memory Cache Faults sec: 0.399978857, Memory Committed Bytes: 2378833920, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 4534.49364, Memory Pool Paged Resident Bytes: 12001280, Memory Write Copies sec: 0

[Assistant] normal


[User] date: 31-Mar-19, time: 12:39:32, latitude: 0.591208562, longitude: 10.66506459

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 43722, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.003224, src_bytes: 54, dst_bytes: 54, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 82, dst_pkts: 1, dst_ip_bytes: 82, dns_query: testphp.vulnweb.com/listproducts.php, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: T, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:    04:06:58   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] PID: 3257, TRUN: 0, TSLPI: 22, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0.16, CMD: Web-Content

[Assistant] normal


[User] date: 23-Apr-19, time:  22:06:53 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] PID: 1496, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: 0, EXC: 0, State: S, CPU: 0.01, CMD: Xorg

[Assistant] attack


[User] date: 1-Apr-19, time:  17:05:26 , latitude: 67.97445871, longitude: 80.41071621

[Assistant] normal


[User] src_ip: 192.168.1.79, src_port: 41032, dst_ip: 192.168.1.255, dst_port: 15600, proto: udp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 63, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 3292, MINFLT: 1909, MAJFLT: 0, VSTEXT: 148, VSIZE: 17924, RSIZE: 2428, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] attack


[User] src_ip: fe80::601f:9cde:4832:2f3f, src_port: 56064, dst_ip: ff02::1:3, dst_port: 5355, proto: udp, service: dns, duration: 0.409991, src_bytes: 48, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 144, dst_pkts: 0, dst_ip_bytes: 0, dns_query: isatap, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 2433, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: dbus-daemon

[Assistant] attack


[User] date: 31-Mar-19, time:    12:38:18   , fridge_temperature: 9.85, temp_condition: high

[Assistant] normal


[User] date: 26-Apr-19, time:  17:16:08 , motion_status: 1, light_status:  on

[Assistant] attack


[User] date: 31-Mar-19, time: 12:42:32, FC1_Read_Input_Register: 29994, FC2_Read_Discrete_Value: 7610, FC3_Read_Holding_Register: 45204, FC4_Read_Coil: 50846

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 50952, dst_ip: 192.168.1.49, dst_port: 5226, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 48156, dst_ip: 18.194.169.124, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2533, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: hud-service

[Assistant] normal


[User] PID: 4470, MINFLT: 0, MAJFLT: 0, VSTEXT: 959, VSIZE: 114.7, RSIZE: 99, VGROW: 0, RGROW: 0, MEM: 0.03, CMD: tcpdump

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 48092, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0.330623, src_bytes: 0, dst_bytes: 0, conn_state: RSTOS0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 100, dst_pkts: 1, dst_ip_bytes: 64, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3197, MINFLT: 0, MAJFLT: 0, VSTEXT: 193, VSIZE: 2.3, RSIZE: 105.4, VGROW: 0, RGROW: 0, MEM: 0.03, CMD: firefox

[Assistant] normal


[User] PID: 10937, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] PID: 14799, MINFLT: 1933, MAJFLT: 0, VSTEXT: 148, VSIZE: 17924, RSIZE: 2408, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 57220, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 83.74672067, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.078126261, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 14.14085323, Processor_pct_ C1_Time: 83.74672067, Processor_pct_ Processor_Time: 15.23300686, Processor_C1_ransitions_sec: 157.4019801, Processor_pct_ DPC_Time: 0.078126261, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 1.093767653, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 28.40035728, Processor_Interrupts_sec: 452.8056963, Process_Pool_Paged Bytes: 20465432, Process_IO Read_Operations_sec: 0, Process_Working_Set_ Private: 1201201152, Process_Working_Set_Peak: 4887031808, Process_IO_Write Operations_sec: 0.100001258, Process_Page_File Bytes: 2126049280, Process_pct_ User_Time: 28.28170647, Process_Virtual_Bytes Peak: 1.48E+14, Process_Page_File Bytes Peak: 3147288576, Process_IO_Other_Bytes_sec: 4844.96095, Process_Private_Bytes: 2126049280, Process_IO_Write_Bytes_sec: 1015.712778, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.48E+14, Process_pct_ Processor_Time: 199.690723, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2087560, Process_Working Set: 1749200896, Process_Page Faults_sec: 506.2063681, Process_ID Process: 0, Process_IO Other Operations_sec: 72.10090703, Process_IO Data Operations_sec: 0.100001258, Process_Thread Count: 929, Process_pct_ Privileged_Time: 171.4090165, Process_IO Data Bytes_sec: 1015.712778, Process_IO Read Bytes_sec: 0, Process_Priority Base: 0, Process_Handle Count: 36360, Network_I(Intel R _82574L_GNC)TCP_APS: 5367, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4892.361546, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 282.8035577, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5175.165104, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 5.200065417, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 8.200103157, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 13.40016857, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 2, Network_I(Intel R _82574L_GNC) Packets Sent sec: 5.200065417, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 8.200103157, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 107646976, Memory Free & Zero Page List Bytes: 2387968, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 885137408, Memory Commit Limit: 8473149440, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0.100001258, Memory Demand Zero Faults sec: 610.9076852, Memory Available KBytes: 864392, Memory Pages sec: 0.100001258, Memory Cache Bytes: 11636736, Memory Pool Nonpaged Bytes: 87908352, Memory Page Faults sec: 507.5063844, Memory Transition Faults sec: 34.90043905, Memory System Cache Resident Bytes: 11636736, Memory Long-Term Average Standby Cache Lifetime (s): 18, Memory Standby Cache Reserve Bytes: 630038528, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 161202176, Memory System Driver Resident Bytes: 4173824, Memory Standby Cache Normal Priority Bytes: 91508736, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 34.96152061, Memory Free System Page Table Entries: 12209902, Memory Available MBytes: 844, Memory Modified Page List Bytes: 20131840, Memory Cache Faults sec: 0.100001258, Memory Committed Bytes: 2962341888, Memory System Driver Total Bytes: 18182144, Memory Pages Input sec: 0.100001258, Memory Pool Paged Resident Bytes: 70176768, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 5973.333333, LogicalDisk(_Total) pct_ Idle Time: 99.97995168, LogicalDisk(_Total) Disk Reads sec: 0.100001258, LogicalDisk(_Total) pct_ Free Space: 81.32588695, LogicalDisk(_Total) Disk Read Bytes sec: 409.6051528, LogicalDisk(_Total) Avg  Disk sec Read: 0.0010979, LogicalDisk(_Total) Disk Writes sec: 1.50001887, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 166444, LogicalDisk(_Total) Avg  Disk sec Write: 0.00032936, LogicalDisk(_Total) Disk Bytes sec: 9369.717871, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.000109792, LogicalDisk(_Total) pct_ Disk Time: 0.020127325, LogicalDisk(_Total) Avg  Disk Bytes Read: 4096, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000494048, LogicalDisk(_Total) Avg  Disk Queue Length: 0.00060384, LogicalDisk(_Total) pct_ Disk Read Time: 0.003659059, LogicalDisk(_Total) Disk Write Bytes sec: 8960.112718, LogicalDisk(_Total) Disk Transfers sec: 1.600020128, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 5856, LogicalDisk(_Total) pct_ Disk Write Time: 0.016468266, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000377394

[Assistant] normal


[User] Processor_DPC_Rate: 26, Processor_pct_ Idle_Time: 43.79140005, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.078246637, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 19.09217937, Processor_pct_ C1_Time: 43.79140005, Processor_pct_ Processor_Time: 48.35721975, Processor_C1_ransitions_sec: 2216.756256, Processor_pct_ DPC_Time: 0.860713004, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 29.26424214, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 1805.014288, Processor_Interrupts_sec: 5434.97394, Process_Pool_Paged Bytes: 22412680, Process_IO Read_Operations_sec: 5.809057192, Process_Working_Set_ Private: 1626431488, Process_Working_Set_Peak: 6180327424, Process_IO_Write Operations_sec: 1.702654694, Process_Page_File Bytes: 4706086912, Process_pct_ User_Time: 38.18435873, Process_Virtual_Bytes Peak: 1.57E+14, Process_Page_File Bytes Peak: 7072632832, Process_IO_Other_Bytes_sec: 3121.566991, Process_Private_Bytes: 4706086912, Process_IO_Write_Bytes_sec: 6769.955376, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.57E+14, Process_pct_ Processor_Time: 198.1204842, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 3142304, Process_Working Set: 1696882688, Process_Page Faults_sec: 35458.18463, Process_ID Process: 0, Process_IO Other Operations_sec: 72.61321489, Process_IO Data Operations_sec: 7.511711886, Process_Thread Count: 1003, Process_pct_ Privileged_Time: 159.9361255, Process_IO Data Bytes_sec: 7942.783992, Process_IO Read Bytes_sec: 1172.828616, Process_Priority Base: 0, Process_Handle Count: 39241, Network_I(Intel R _82574L_GNC)TCP_APS: 5123, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4924.978781, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 234.8661916, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5159.844972, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 4.206558656, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 7.712024203, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 11.91858286, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 2, Network_I(Intel R _82574L_GNC) Packets Sent sec: 4.206558656, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 7.712024203, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 103702528, Memory Free & Zero Page List Bytes: 2101248, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 740937728, Memory Commit Limit: 8464515072, Memory Transition Pages RePurposed sec: 5917.82678, Memory Pages Output sec: 2712.629396, Memory Page Reads sec: 1370.236404, Memory Demand Zero Faults sec: 1415.306675, Memory Available KBytes: 723572, Memory Pages sec: 8234.438725, Memory Cache Bytes: 1052672, Memory Pool Nonpaged Bytes: 108445696, Memory Page Faults sec: 35588.48779, Memory Transition Faults sec: 21588.65996, Memory System Cache Resident Bytes: 1052672, Memory Long-Term Average Standby Cache Lifetime (s): 50, Memory Standby Cache Reserve Bytes: 462581760, Memory Page Writes sec: 154.841421, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 198504448, Memory System Driver Resident Bytes: 1.76E+13, Memory Standby Cache Normal Priority Bytes: 77750272, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 66.46212106, Memory Free System Page Table Entries: 12216572, Memory Available MBytes: 706, Memory Modified Page List Bytes: 21733376, Memory Cache Faults sec: 1.902967011, Memory Committed Bytes: 5625696256, Memory System Driver Total Bytes: 18223104, Memory Pages Input sec: 5521.809329, Memory Pool Paged Resident Bytes: 18538496, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 71714.39793, LogicalDisk(_Total) pct_ Idle Time: 79.51400791, LogicalDisk(_Total) Disk Reads sec: 1335.181749, LogicalDisk(_Total) pct_ Free Space: 81.30536541, LogicalDisk(_Total) Disk Read Bytes sec: 23039211.19, LogicalDisk(_Total) Avg  Disk sec Read: 0.000751127, LogicalDisk(_Total) Disk Writes sec: 155.0417333, LogicalDisk(_Total) Current Disk Queue Length: 2, LogicalDisk(_Total) Split IO Sec: 0.100156158, LogicalDisk(_Total) Free Megabytes: 166402, LogicalDisk(_Total) Avg  Disk sec Write: 0.000300987, LogicalDisk(_Total) Disk Bytes sec: 34157935.75, LogicalDisk(_Total) Avg  Disk Read Queue Length: 1.002886748, LogicalDisk(_Total) pct_ Disk Time: 34.98507034, LogicalDisk(_Total) Avg  Disk Bytes Read: 17255.48691, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.046665343, LogicalDisk(_Total) Avg  Disk Queue Length: 1.04955209, LogicalDisk(_Total) pct_ Disk Read Time: 33.42955825, LogicalDisk(_Total) Disk Write Bytes sec: 11118724.56, LogicalDisk(_Total) Disk Transfers sec: 1490.223482, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 22921.35117, LogicalDisk(_Total) pct_ Disk Write Time: 1.55551209, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000704295

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 49271, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000041, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49404, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000139, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2821, MINFLT: 0, MAJFLT: 0, VSTEXT: 10, VSIZE: 1.3, RSIZE: 99.4, VGROW: 0, RGROW: 0, MEM: 0.03, CMD: compiz

[Assistant] attack


[User] date: 26-Apr-19, time:  16:49:45 , motion_status: 1, light_status:  on

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49474, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000106, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2607, MINFLT: 132, MAJFLT: 254.1, VSTEXT: 6780, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: boltd

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 60008, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 1.207906, src_bytes: 1176, dst_bytes: 3270, conn_state: SF, missed_bytes: 0, src_pkts: 28, src_ip_bytes: 1960, dst_pkts: 15, dst_ip_bytes: 3690, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] Processor_DPC_Rate: 1, Processor_pct_ Idle_Time: 81.67080257, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 16.56278322, Processor_pct_ C1_Time: 81.67080257, Processor_pct_ Processor_Time: 17.42046289, Processor_C1_ransitions_sec: 151.1021487, Processor_pct_ DPC_Time: 0.078126336, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 0.859389696, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 28.10039959, Processor_Interrupts_sec: 477.2067859, Process_Pool_Paged Bytes: 22028208, Process_IO Read_Operations_sec: 2.200031284, Process_Working_Set_ Private: 1421897728, Process_Working_Set_Peak: 5289066496, Process_IO_Write Operations_sec: 1.400019908, Process_Page_File Bytes: 2446483456, Process_pct_ User_Time: 33.12556645, Process_Virtual_Bytes Peak: 1.52E+14, Process_Page_File Bytes Peak: 3489284096, Process_IO_Other_Bytes_sec: 5238.974498, Process_Private_Bytes: 2446483456, Process_IO_Write_Bytes_sec: 7938.912891, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.52E+14, Process_pct_ Processor_Time: 199.8471674, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2235360, Process_Working Set: 1968041984, Process_Page Faults_sec: 607.1086331, Process_ID Process: 0, Process_IO Other Operations_sec: 108.9015486, Process_IO Data Operations_sec: 3.600051193, Process_Thread Count: 950, Process_pct_ Privileged_Time: 166.7216009, Process_IO Data Bytes_sec: 8184.91639, Process_IO Read Bytes_sec: 246.0034982, Process_Priority Base: 0, Process_Handle Count: 38321, Network_I(Intel R _82574L_GNC)TCP_APS: 5333, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 5203.873999, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 274.2038992, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5478.077898, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 5.100072523, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 8.700123716, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 13.80019624, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 2, Network_I(Intel R _82574L_GNC) Packets Sent sec: 5.100072523, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 8.700123716, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 108535808, Memory Free & Zero Page List Bytes: 20082688, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 656871424, Memory Commit Limit: 8473149440, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 776.1110363, Memory Available KBytes: 641476, Memory Pages sec: 0, Memory Cache Bytes: 13877248, Memory Pool Nonpaged Bytes: 89055232, Memory Page Faults sec: 607.1086331, Memory Transition Faults sec: 9.000127982, Memory System Cache Resident Bytes: 13877248, Memory Long-Term Average Standby Cache Lifetime (s): 16, Memory Standby Cache Reserve Bytes: 372662272, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 161337344, Memory System Driver Resident Bytes: 4173824, Memory Standby Cache Normal Priority Bytes: 102789120, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 38.76213355, Memory Free System Page Table Entries: 12209912, Memory Available MBytes: 626, Memory Modified Page List Bytes: 13713408, Memory Cache Faults sec: 0, Memory Committed Bytes: 3284373504, Memory System Driver Total Bytes: 18182144, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 71069696, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 19114.66667, LogicalDisk(_Total) pct_ Idle Time: 99.99297988, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 81.32002365, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 0.600008532, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 166432, LogicalDisk(_Total) Avg  Disk sec Write: 0.000362317, LogicalDisk(_Total) Disk Bytes sec: 11468.96309, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.007246124, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000217394, LogicalDisk(_Total) Avg  Disk Queue Length: 0.000217394, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 11468.96309, LogicalDisk(_Total) Disk Transfers sec: 0.600008532, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 19114.66667, LogicalDisk(_Total) pct_ Disk Write Time: 0.007246124, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000362317

[Assistant] normal


[User] PID: 4324, TRUN: 1, TSLPI: 0, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 0, Status: 0, EXC: 0, State: R, CPU: 0.1, CMD: atop

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:04, FC1_Read_Input_Register: 47247, FC2_Read_Discrete_Value: 61638, FC3_Read_Holding_Register: 17498, FC4_Read_Coil: 27663

[Assistant] normal


[User] PID: 3676, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] PID: 4560, TRUN: 0, TSLPI: 0, TSLPU: 0, POLI: 0, NICE: 0, PRI: 0, RTPR: 0, CPUNR: 0, Status: NE, EXC: 0, State: E, CPU: 0, CMD: <sh>

[Assistant] attack


[User] src_ip: 192.168.1.195, src_port: 64476, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 72, dst_pkts: 0, dst_ip_bytes: 0, dns_query: ris.api.iris.microsoft.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49461, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000134, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1196, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: 0, EXC: 0, State: S, CPU: 0, CMD: NetworkManager

[Assistant] attack


[User] PID: 1371, MINFLT: 5, MAJFLT: 0, VSTEXT: 36, VSIZE: 19296, RSIZE: 640, VGROW: 0, RGROW: 0, MEM: 0, CMD: irqbalance

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 57192, dst_ip: 107.178.254.65, dst_port: 443, proto: tcp, service: ssl, duration: 132.141081, src_bytes: 1551, dst_bytes: 8230, conn_state: SF, missed_bytes: 0, src_pkts: 29, src_ip_bytes: 3067, dst_pkts: 25, dst_ip_bytes: 9502, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:42:48, temperature: 23.96229107, pressure: 1.524918305, humidity: 19.97873209

[Assistant] normal


[User] src_ip: 192.168.1.6, src_port: 5353, dst_ip: 224.0.0.251, dst_port: 5353, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 89, dst_pkts: 0, dst_ip_bytes: 0, dns_query: _googlecast._tcp.local, dns_qclass: 1, dns_qtype: 12, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 1442, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: Xorg

[Assistant] normal


[User] PID: 1967, TRUN: 0, TSLPI: 2, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: 0, EXC: 0, State: S, CPU: 0, CMD: vmtoolsd

[Assistant] attack


[User] PID: 2008, MINFLT: 0, MAJFLT: 0, VSTEXT: 596, VSIZE: 184.3, RSIZE: 188, VGROW: 0, RGROW: 8, MEM: 0, CMD: apache2

[Assistant] normal


[User] date: 31-Mar-19, time: 12:40:04, latitude: 0.714195966, longitude: 10.47181111

[Assistant] normal


[User] date: 28-Apr-19, time:  10:24:34 , current_temperature: 31.2998108, thermostat_status: 1

[Assistant] attack


[User] PID: 2794, MINFLT: 0, MAJFLT: 0, VSTEXT: 33, VSIZE: 465.9, RSIZE: 5904, VGROW: 0, RGROW: 24, MEM: 0, CMD: unity-fallbac

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 55259, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000031, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 38830, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.048482, src_bytes: 44, dst_bytes: 44, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 100, dst_pkts: 2, dst_ip_bytes: 100, dns_query: wpad, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: T, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time:    12:43:52   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] PID: 2596, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: unity-settings, attack: 0

[Assistant] normal


[User] date: 28-Apr-19, time:  08:02:19 , temperature: 31.18788562, pressure: 0.364685014, humidity: 64.99512803

[Assistant] attack


[User] PID: 2918, TRUN: 0, TSLPI: 29, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 5, Status: -, EXC: 0, State: S, CPU: 0, CMD: Web Content

[Assistant] attack


[User] date: 1-Apr-19, time:  23:52:29 , current_temperature: 28.81314888, thermostat_status: 1

[Assistant] normal


[User] PID: 13873, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <pop3-login>, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 34296, dst_ip: 192.168.1.152, dst_port: 10502, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 28-Apr-19, time: 4:18:20, temperature: 44.96522257, pressure: 1.191014138, humidity: 23.94409732

[Assistant] attack


[User] date: 2-Apr-19, time:    04:07:00   , door_state: open, sphone_signal: true

[Assistant] normal


[User] PID: 4374, MINFLT: 2077, MAJFLT: 0, VSTEXT: 148, VSIZE: 17948, RSIZE: 2456, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:46, FC1_Read_Input_Register: 11639, FC2_Read_Discrete_Value: 57555, FC3_Read_Holding_Register: 55160, FC4_Read_Coil: 19138

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 60806, dst_ip: 23.212.212.73, dst_port: 443, proto: tcp, service: -, duration: 3.533733, src_bytes: 32, dst_bytes: 31, conn_state: SF, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 307, dst_pkts: 4, dst_ip_bytes: 239, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.79, src_port: 42049, dst_ip: 192.168.1.255, dst_port: 15600, proto: udp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 63, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 10898, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <vsftpd>, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.195, src_port: 1250, dst_ip: 192.168.1.195, dst_port: 1250, proto: tcp, service: -, duration: 0.256082, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 2797, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: nautilus

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 50022, dst_ip: 13.107.3.128, dst_port: 443, proto: tcp, service: ssl, duration: 0.328621, src_bytes: 269, dst_bytes: 4837, conn_state: RSTR, missed_bytes: 0, src_pkts: 11, src_ip_bytes: 741, dst_pkts: 11, dst_ip_bytes: 6749, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2978, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: vmtoolsd

[Assistant] attack


[User] date: 2-Apr-19, time:  04:06:27 , current_temperature: 26.22664091, thermostat_status: 1

[Assistant] normal


[User] PID: 2340, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: init, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 51038, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.0151, src_bytes: 68, dst_bytes: 416, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 124, dst_pkts: 2, dst_ip_bytes: 472, dns_query: www.facebook.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1851, MINFLT: 0, MAJFLT: 0, VSTEXT: 36, VSIZE: 159.8, RSIZE: 1896, VGROW: 0, RGROW: 0, MEM: 0, CMD: vmtoolsd

[Assistant] normal


[User] date: 31-Mar-19, time: 12:42:04, FC1_Read_Input_Register: 474, FC2_Read_Discrete_Value: 40100, FC3_Read_Holding_Register: 45881, FC4_Read_Coil: 10513

[Assistant] normal


[User] PID: 2577, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: upstart-dbus-b, attack: 1

[Assistant] attack


[User] PID: 2631, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: unity-panel-se

[Assistant] attack


[User] date: 31-Mar-19, time:    12:43:56   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49368, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.013413, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:42:40, FC1_Read_Input_Register: 24219, FC2_Read_Discrete_Value: 37501, FC3_Read_Holding_Register: 7460, FC4_Read_Coil: 11209

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 50035, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.000241, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  10:43:49 , latitude: 117.0843158, longitude: 131.9392481

[Assistant] attack


[User] date: 28-Apr-19, time:  05:27:09 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49752, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.000103, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 34796, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000047, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 56319, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.010716, src_bytes: 74, dst_bytes: 90, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 130, dst_pkts: 2, dst_ip_bytes: 146, dns_query: testphp.vulnweb.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 58514, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.190931, src_bytes: 535, dst_bytes: 1919, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 803, dst_pkts: 6, dst_ip_bytes: 2239, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2489, MINFLT: 0, MAJFLT: 0, VSTEXT: 78, VSIZE: 122, RSIZE: 3320, VGROW: 0, RGROW: 0, MEM: 0, CMD: at-spi2-regist

[Assistant] normal


[User] PID: 2547, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: unity-panel-se

[Assistant] normal


[User] PID: 3257, MINFLT: 10625, MAJFLT: 0, VSTEXT: 193, VSIZE: 1.9, RSIZE: 326.4, VGROW: 1024, RGROW: 19.9, MEM: 0.09, CMD: Web-Content

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 44073, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.014799, src_bytes: 62, dst_bytes: 176, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 118, dst_pkts: 2, dst_ip_bytes: 232, dns_query: ocsp.pki.goog, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 1-Apr-19, time:  20:12:25 , current_temperature: 32.82539013, thermostat_status: 1

[Assistant] normal


[User] PID: 2918, TRUN: 0, TSLPI: 29, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: Web Content

[Assistant] attack


[User] PID: 2589, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: upstart-file-b, attack: 0

[Assistant] normal


[User] date: 25-Apr-19, time: 8:36:05, motion_status: 0, light_status:  off

[Assistant] attack


[User] date: 28-Apr-19, time: 4:39:25, temperature: 36.9942682, pressure: 1.894264223, humidity: 5.995243943

[Assistant] attack


[User] PID: 2517, TRUN: 0, TSLPI: 2, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: gvfsd

[Assistant] normal


[User] date: 25-Apr-19, time: 9:52:25, temperature: 34.36146203, pressure: 0.705560002, humidity: 84.41473337

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 1880, dst_ip: 192.168.1.152, dst_port: 51782, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 4471, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: 0, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] PID: 12009, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <systemd-udev>, attack: 0

[Assistant] normal


[User] PID: 3790, MINFLT: 0, MAJFLT: 0, VSTEXT: 2132, VSIZE: 2.4, RSIZE: 8984, VGROW: 0, RGROW: 0, MEM: 0, CMD: ostinato

[Assistant] normal


[User] Processor_DPC_Rate: 16, Processor_pct_ Idle_Time: 88.05958106, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 0, Processor_pct_ C1_Time: 88.05958106, Processor_pct_ Processor_Time: 0.225859572, Processor_C1_ransitions_sec: 818.9076498, Processor_pct_ DPC_Time: 0, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 0.234028476, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 225.6714167, Processor_Interrupts_sec: 1072.438502, Process_Pool_Paged Bytes: 13750592, Process_IO Read_Operations_sec: 34.34998555, Process_Working_Set_ Private: 243064832, Process_Working_Set_Peak: 3485016064, Process_IO_Write Operations_sec: 30.95492884, Process_Page_File Bytes: 1135382528, Process_pct_ User_Time: 0, Process_Virtual_Bytes Peak: 1.06E+14, Process_Page_File Bytes Peak: 2823491584, Process_IO_Other_Bytes_sec: 241691.1915, Process_Private_Bytes: 1135382528, Process_IO_Write_Bytes_sec: 294609.8406, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.06E+14, Process_pct_ Processor_Time: 200.0163378, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 1658200, Process_Working Set: 926826496, Process_Page Faults_sec: 647.9565589, Process_ID Process: 0, Process_IO Other Operations_sec: 2893.586864, Process_IO Data Operations_sec: 65.3049144, Process_Thread Count: 772, Process_pct_ Privileged_Time: 200.0163378, Process_IO Data Bytes_sec: 583768.5183, Process_IO Read Bytes_sec: 289158.6777, Process_Priority Base: 0, Process_Handle Count: 28658, Network_I(Intel R _82574L_GNC)TCP_APS: 0, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 56.21814496, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 0, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 56.21814496, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 0, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 0.798836873, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 0.798836873, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 0, Network_I(Intel R _82574L_GNC) Packets Sent sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 0.798836873, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 324706304, Memory Free & Zero Page List Bytes: 2600960, Memory Cache Bytes Peak: 437018624, Memory System Code Resident Bytes: 3579904, Memory Available Bytes: 782434304, Memory Commit Limit: 3354243072, Memory Transition Pages RePurposed sec: 184.9307362, Memory Pages Output sec: 0, Memory Page Reads sec: 54.92003504, Memory Demand Zero Faults sec: 286.7824375, Memory Available KBytes: 764096, Memory Pages sec: 135.40285, Memory Cache Bytes: 63188992, Memory Pool Nonpaged Bytes: 91967488, Memory Page Faults sec: 1029.301311, Memory Transition Faults sec: 510.4567621, Memory System Cache Resident Bytes: 0, Memory Long-Term Average Standby Cache Lifetime (s): 445, Memory Standby Cache Reserve Bytes: 467615744, Memory Page Writes sec: 0, Memory System Code Total Bytes: 3825664, Memory Standby Cache Core Bytes: 128094208, Memory System Driver Resident Bytes: 7860224, Memory Standby Cache Normal Priority Bytes: 184127488, Memory Pool Paged Allocs: 495046, Memory Pool Nonpaged Allocs: 225872, Memory pct_ Committed Bytes In Use: 56.04592461, Memory Free System Page Table Entries: 12236398, Memory Available MBytes: 746, Memory Modified Page List Bytes: 28360704, Memory Cache Faults sec: 207.9971509, Memory Committed Bytes: 1879916544, Memory System Driver Total Bytes: 17104896, Memory Pages Input sec: 135.40285, Memory Pool Paged Resident Bytes: 238444544, Memory Write Copies sec: 24.76394307, LogicalDisk(_Total) Avg  Disk Bytes Write: 14954.17512, LogicalDisk(_Total) pct_ Idle Time: 17.25400117, LogicalDisk(_Total) Disk Reads sec: 44.23559186, LogicalDisk(_Total) pct_ Free Space: 92.66294646, LogicalDisk(_Total) Disk Read Bytes sec: 461152.5502, LogicalDisk(_Total) Avg  Disk sec Read: 0.000689778, LogicalDisk(_Total) Disk Writes sec: 86.67380076, LogicalDisk(_Total) Current Disk Queue Length: 1, LogicalDisk(_Total) Split IO Sec: 0.299563828, LogicalDisk(_Total) Free Megabytes: 189467, LogicalDisk(_Total) Avg  Disk sec Write: 0.009374274, LogicalDisk(_Total) Disk Bytes sec: 1757287.745, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.030511971, LogicalDisk(_Total) pct_ Disk Time: 84.29958844, LogicalDisk(_Total) Avg  Disk Bytes Read: 10424.92099, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.812483913, LogicalDisk(_Total) Avg  Disk Queue Length: 0.842995884, LogicalDisk(_Total) pct_ Disk Read Time: 3.051197123, LogicalDisk(_Total) Disk Write Bytes sec: 1296135.194, LogicalDisk(_Total) Disk Transfers sec: 130.9093926, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 13423.69489, LogicalDisk(_Total) pct_ Disk Write Time: 81.24839132, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.006439696

[Assistant] normal


[User] PID: 3897, RDDSK: 0, WRDSK: 8, WCANCL: 0, DSK: 0.09, CMD: atop, attack: 0

[Assistant] normal


[User] PID: 1442, MINFLT: 1, MAJFLT: 0, VSTEXT: 2219, VSIZE: 758, RSIZE: 267.1, VGROW: 0, RGROW: 0, MEM: 0.07, CMD: Xorg

[Assistant] normal


[User] date: 31-Mar-19, time: 12:42:32, temperature: 28.89560904, pressure: 0.628184662, humidity: 72.03589161

[Assistant] normal


[User] PID: 2797, TRUN: 0, TSLPI: 5, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: nautilus

[Assistant] normal


[User] date: 31-Mar-19, time:    12:41:40   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:06, FC1_Read_Input_Register: 35951, FC2_Read_Discrete_Value: 22773, FC3_Read_Holding_Register: 54185, FC4_Read_Coil: 7101

[Assistant] normal


[User] date: 1-Apr-19, time:  17:53:13 , latitude: 94.13167144, longitude: 105.0990331

[Assistant] normal


[User] date: 25-Apr-19, time: 8:18:09, current_temperature: 31.78255052, thermostat_status: 1

[Assistant] attack


[User] PID: 3291, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: worer/u256:0, attack: 0

[Assistant] normal


[User] PID: 1247, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: mysqld, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 56526, dst_ip: 192.168.1.184, dst_port: 443, proto: tcp, service: -, duration: 0.004857, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.103, src_port: 50398, dst_ip: 224.0.0.252, dst_port: 5355, proto: udp, service: dns, duration: 0.410525, src_bytes: 66, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 122, dst_pkts: 0, dst_ip_bytes: 0, dns_query: desktop-18ss3ba, dns_qclass: 1, dns_qtype: 255, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:42:36, temperature: 24.33024937, pressure: 0.996038348, humidity: 79.63794697

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 80, dst_ip: 192.168.1.193, dst_port: 1336, proto: tcp, service: -, duration: 0.270515, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:38, motion_status: 1, light_status:  on

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49468, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000189, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  10:34:34 , latitude: 112.4962422, longitude: 127.2627094

[Assistant] attack


[User] date: 31-Mar-19, time: 12:40:19, motion_status: 0, light_status:  off

[Assistant] normal


[User] PID: 4374, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 86, dst_ip: 192.168.1.194, dst_port: 86, proto: tcp, service: -, duration: 0.000009, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] Processor_DPC_Rate: 13, Processor_pct_ Idle_Time: 48.05741506, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.312492269, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 14.76525971, Processor_pct_ C1_Time: 48.05741506, Processor_pct_ Processor_Time: 46.17320667, Processor_C1_ransitions_sec: 2982.024853, Processor_pct_ DPC_Time: 0.624984538, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 31.40547303, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 2675.032589, Processor_Interrupts_sec: 5269.467209, Process_Pool_Paged Bytes: 22210320, Process_IO Read_Operations_sec: 3.599909282, Process_Working_Set_ Private: 1447325696, Process_Working_Set_Peak: 6165905408, Process_IO_Write Operations_sec: 5.199868963, Process_Page_File Bytes: 5401505792, Process_pct_ User_Time: 29.53051941, Process_Virtual_Bytes Peak: 1.52E+14, Process_Page_File Bytes Peak: 7069536256, Process_IO_Other_Bytes_sec: 3379.614834, Process_Private_Bytes: 5401505792, Process_IO_Write_Bytes_sec: 28676.07736, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.52E+14, Process_pct_ Processor_Time: 198.1200985, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 3135496, Process_Working Set: 1528852480, Process_Page Faults_sec: 35747.09917, Process_ID Process: 0, Process_IO Other Operations_sec: 68.39827636, Process_IO Data Operations_sec: 8.799778246, Process_Thread Count: 991, Process_pct_ Privileged_Time: 168.5895791, Process_IO Data Bytes_sec: 29601.05405, Process_IO Read Bytes_sec: 924.9766906, Process_Priority Base: 0, Process_Handle Count: 38656, Network_I(Intel R _82574L_GNC)TCP_APS: 5021, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 5075.572096, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 253.5936094, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5329.165705, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 4.599884083, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 9.399763126, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 13.99964721, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 2, Network_I(Intel R _82574L_GNC) Packets Sent sec: 4.599884083, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 9.399763126, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 104394752, Memory Free & Zero Page List Bytes: 5992448, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 496668672, Memory Commit Limit: 8464515072, Memory Transition Pages RePurposed sec: 26966.52044, Memory Pages Output sec: 2302.841968, Memory Page Reads sec: 2381.539985, Memory Demand Zero Faults sec: 2728.531241, Memory Available KBytes: 485028, Memory Pages sec: 9413.162788, Memory Cache Bytes: 999424, Memory Pool Nonpaged Bytes: 114982912, Memory Page Faults sec: 35853.39649, Memory Transition Faults sec: 13876.9503, Memory System Cache Resident Bytes: 999424, Memory Long-Term Average Standby Cache Lifetime (s): 22, Memory Standby Cache Reserve Bytes: 242225152, Memory Page Writes sec: 218.8944839, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 193691648, Memory System Driver Resident Bytes: 1.76E+13, Memory Standby Cache Normal Priority Bytes: 55537664, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 74.68260833, Memory Free System Page Table Entries: 12216237, Memory Available MBytes: 473, Memory Modified Page List Bytes: 435097600, Memory Cache Faults sec: 2.799929442, Memory Committed Bytes: 6321520640, Memory System Driver Total Bytes: 18223104, Memory Pages Input sec: 7110.32082, Memory Pool Paged Resident Bytes: 26517504, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 42092.31644, LogicalDisk(_Total) pct_ Idle Time: 76.30882412, LogicalDisk(_Total) Disk Reads sec: 2366.140373, LogicalDisk(_Total) pct_ Free Space: 81.29852489, LogicalDisk(_Total) Disk Read Bytes sec: 29336041.53, LogicalDisk(_Total) Avg  Disk sec Read: 0.00036933, LogicalDisk(_Total) Disk Writes sec: 224.9943301, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.19999496, LogicalDisk(_Total) Free Megabytes: 166388, LogicalDisk(_Total) Avg  Disk sec Write: 0.000449024, LogicalDisk(_Total) Disk Bytes sec: 38806574.07, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.87388609, LogicalDisk(_Total) pct_ Disk Time: 32.49713702, LogicalDisk(_Total) Avg  Disk Bytes Read: 12398.2676, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.101028011, LogicalDisk(_Total) Avg  Disk Queue Length: 0.974914101, LogicalDisk(_Total) pct_ Disk Read Time: 29.12953634, LogicalDisk(_Total) Disk Write Bytes sec: 9470532.543, LogicalDisk(_Total) Disk Transfers sec: 2591.134703, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 14976.67181, LogicalDisk(_Total) pct_ Disk Write Time: 3.367599686, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.00037625

[Assistant] normal


[User] PID: 4032, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: kworker/u256:0

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:45, temperature: 34.79366518, pressure: 0.674055907, humidity: 86.26057292

[Assistant] normal


[User] PID: 3031, RDDSK: 0, WRDSK: 4, WCANCL: 0, DSK: 0, CMD: atop, attack: 1

[Assistant] attack


[User] date: 28-Apr-19, time:  07:07:23 , FC1_Read_Input_Register: 51759, FC2_Read_Discrete_Value: 12830, FC3_Read_Holding_Register: 54985, FC4_Read_Coil: 47641

[Assistant] attack


[User] PID: 7818, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <vsftpd>, attack: 0

[Assistant] normal


[User] PID: 3895, RDDSK: 0, WRDSK: 8, WCANCL: 0, DSK: 0.09, CMD: atop, attack: 0

[Assistant] normal


[User] PID: 3790, MINFLT: 0, MAJFLT: 0, VSTEXT: 2132, VSIZE: 2.4, RSIZE: 14440, VGROW: 0, RGROW: 0, MEM: 0, CMD: ostinato

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 43162, dst_ip: 192.168.1.152, dst_port: 21, proto: tcp, service: -, duration: 0.000196, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 60, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2501, MINFLT: 0, MAJFLT: 0, VSTEXT: 148, VSIZE: 353.6, RSIZE: 3636, VGROW: 0, RGROW: 0, MEM: 0, CMD: ibus-daemon

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 56224, dst_ip: 172.217.194.157, dst_port: 443, proto: tcp, service: ssl, duration: 148.438175, src_bytes: 7685, dst_bytes: 27745, conn_state: SF, missed_bytes: 0, src_pkts: 44, src_ip_bytes: 9981, dst_pkts: 45, dst_ip_bytes: 30057, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.190, src_port: 24969, dst_ip: 199.253.182.182, dst_port: 53, proto: udp, service: dns, duration: 7.041981, src_bytes: 101, dst_bytes: 305, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 129, dst_pkts: 1, dst_ip_bytes: 333, dns_query: 7.4.5.c.0.7.f.f.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.f.f.ip6.arpa, dns_qclass: 1, dns_qtype: 12, dns_rcode: 3, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:37:56, motion_status: 0, light_status:  off

[Assistant] normal


[User] date: 28-Apr-19, time:  04:36:44 , fridge_temperature: 8.25, temp_condition: high

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:51, motion_status: 1, light_status:  on

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 36666, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3895, RDDSK: 0, WRDSK: 12, WCANCL: 0, DSK: 0.08, CMD: atop, attack: 0

[Assistant] normal


[User] PID: 4372, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] PID: 5443, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: worer/u256:1, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 1270, dst_ip: 192.168.1.152, dst_port: 1270, proto: tcp, service: -, duration: 0.260321, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 2-Apr-19, time:    04:02:03   , fridge_temperature: 4.15, temp_condition: low

[Assistant] normal


[User] Processor_DPC_Rate: 1, Processor_pct_ Idle_Time: 71.15612668, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 26.17197419, Processor_pct_ C1_Time: 71.15612668, Processor_pct_ Processor_Time: 27.42159993, Processor_C1_ransitions_sec: 126.0006124, Processor_pct_ DPC_Time: 0, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 1.250004738, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 27.50013365, Processor_Interrupts_sec: 734.1035677, Process_Pool_Paged Bytes: 24508368, Process_IO Read_Operations_sec: 0, Process_Working_Set_ Private: 1650950144, Process_Working_Set_Peak: 5723189248, Process_IO_Write Operations_sec: 0.200000972, Process_Page_File Bytes: 3349585920, Process_pct_ User_Time: 52.34394838, Process_Virtual_Bytes Peak: 1.57E+14, Process_Page_File Bytes Peak: 4358537216, Process_IO_Other_Bytes_sec: 4738.72303, Process_Private_Bytes: 3349585920, Process_IO_Write_Bytes_sec: 7782.437823, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.57E+14, Process_pct_ Processor_Time: 200.000758, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2581984, Process_Working Set: 1795563520, Process_Page Faults_sec: 1183.305751, Process_ID Process: 0, Process_IO Other Operations_sec: 69.80033923, Process_IO Data Operations_sec: 0.200000972, Process_Thread Count: 995, Process_pct_ Privileged_Time: 147.6568096, Process_IO Data Bytes_sec: 7782.437823, Process_IO Read Bytes_sec: 0, Process_Priority Base: 0, Process_Handle Count: 39482, Network_I(Intel R _82574L_GNC)TCP_APS: 6024, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4752.323096, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 189.0009185, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 4941.324015, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 3.50001701, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 5.700027702, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 9.200044712, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 1, Network_I(Intel R _82574L_GNC) Packets Sent sec: 3.50001701, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 5.700027702, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 105410560, Memory Free & Zero Page List Bytes: 2887680, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 614473728, Memory Commit Limit: 5141536768, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 1.800008748, Memory Demand Zero Faults sec: 654.8031823, Memory Available KBytes: 600072, Memory Pages sec: 22.20010789, Memory Cache Bytes: 1228800, Memory Pool Nonpaged Bytes: 93310976, Memory Page Faults sec: 1184.605757, Memory Transition Faults sec: 603.3029321, Memory System Cache Resident Bytes: 1228800, Memory Long-Term Average Standby Cache Lifetime (s): 855, Memory Standby Cache Reserve Bytes: 224915456, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 197890048, Memory System Driver Resident Bytes: 1.76E+13, Memory Standby Cache Normal Priority Bytes: 188780544, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 83.4094664, Memory Free System Page Table Entries: 12208825, Memory Available MBytes: 586, Memory Modified Page List Bytes: 32497664, Memory Cache Faults sec: 0, Memory Committed Bytes: 4288528384, Memory System Driver Total Bytes: 18178048, Memory Pages Input sec: 22.20010789, Memory Pool Paged Resident Bytes: 30199808, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 13107.2, LogicalDisk(_Total) pct_ Idle Time: 99.94328479, LogicalDisk(_Total) Disk Reads sec: 1.800008748, LogicalDisk(_Total) pct_ Free Space: 82.93438482, LogicalDisk(_Total) Disk Read Bytes sec: 90931.64193, LogicalDisk(_Total) Avg  Disk sec Read: 0.0006089, LogicalDisk(_Total) Disk Writes sec: 1.00000486, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.100000486, LogicalDisk(_Total) Free Megabytes: 169736, LogicalDisk(_Total) Avg  Disk sec Write: 0.00064036, LogicalDisk(_Total) Disk Bytes sec: 104038.9056, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.001096024, LogicalDisk(_Total) pct_ Disk Time: 0.057879219, LogicalDisk(_Total) Avg  Disk Bytes Read: 50517.33333, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000640362, LogicalDisk(_Total) Avg  Disk Queue Length: 0.001736387, LogicalDisk(_Total) pct_ Disk Read Time: 0.036534138, LogicalDisk(_Total) Disk Write Bytes sec: 13107.2637, LogicalDisk(_Total) Disk Transfers sec: 2.800013608, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 37156.57143, LogicalDisk(_Total) pct_ Disk Write Time: 0.021346081, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000620136

[Assistant] normal


[User] PID: 3900, MINFLT: 0, MAJFLT: 0, VSTEXT: 67, VSIZE: 188.8, RSIZE: 6960, VGROW: 0, RGROW: 504, MEM: 0, CMD: https

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 34296, dst_ip: 192.168.1.152, dst_port: 10502, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 2774, TRUN: 0, TSLPI: 9, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: compiz

[Assistant] normal


[User] date: 1-Apr-19, time:  20:56:04 , current_temperature: 32.03517351, thermostat_status: 1

[Assistant] normal


[User] date: 28-Apr-19, time:  09:03:52 , latitude: 64.0814678, longitude: 78.56624383

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 50038, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.000081, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 42909, dst_ip: 192.168.1.103, dst_port: 6580, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2689, TRUN: 0, TSLPI: 6, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: indicator-date

[Assistant] normal


[User] date: 31-Mar-19, time:    12:39:44   , fridge_temperature: 13.85, temp_condition: high

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 59562, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2501, MINFLT: 2, MAJFLT: 0, VSTEXT: 148, VSIZE: 353.6, RSIZE: 3296, VGROW: 0, RGROW: 340, MEM: 0, CMD: ibus-daemon

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 80, dst_ip: 192.168.1.193, dst_port: 1279, proto: tcp, service: -, duration: 0.259614, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:54, temperature: 47.32025167, pressure: 0.892906657, humidity: 65.47416804

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:16, temperature: 46.19613254, pressure: 0.157347963, humidity: 60.97078024

[Assistant] normal


[User] date: 2-Apr-19, time:  04:06:26 , current_temperature: 25.68254486, thermostat_status: 1

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 37388, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.012072, src_bytes: 66, dst_bytes: 290, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 122, dst_pkts: 2, dst_ip_bytes: 346, dns_query: cdn.taboola.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack