[User] src_ip: 192.168.1.31, src_port: 45322, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.003357, src_bytes: 52, dst_bytes: 52, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 108, dst_pkts: 2, dst_ip_bytes: 108, dns_query: wpad.hub, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: T, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 11867, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vsftpd, attack: 0

[Assistant] normal


[User] date: 2-Apr-19, time:    04:04:16   , fridge_temperature: 6.2, temp_condition: high

[Assistant] normal


[User] PID: 2076, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: colord

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:11, current_temperature: 32.70025531, thermostat_status: 1

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:47, current_temperature: 30.14430038, thermostat_status: 1

[Assistant] normal


[User] PID: 2536, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: 0, EXC: 0, State: S, CPU: 1.26, CMD: hud-service

[Assistant] attack


[User] PID: 3675, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.180, src_port: 56806, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000375, src_bytes: 31, dst_bytes: 106, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 59, dst_pkts: 1, dst_ip_bytes: 134, dns_query: elasticsearch, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 56601, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.125277, src_bytes: 42, dst_bytes: 200, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 70, dst_pkts: 1, dst_ip_bytes: 228, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 25-Apr-19, time:  10:11:16 , FC1_Read_Input_Register: 9908, FC2_Read_Discrete_Value: 35380, FC3_Read_Holding_Register: 9458, FC4_Read_Coil: 47761

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 45839, dst_ip: 192.168.1.46, dst_port: 1217, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 90.18322708, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.078123455, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 5.937382618, Processor_pct_ C1_Time: 90.18322708, Processor_pct_ Processor_Time: 7.970569422, Processor_C1_ransitions_sec: 270.7918302, Processor_pct_ DPC_Time: 0, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 1.953086387, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 23.39929404, Processor_Interrupts_sec: 427.0871148, Process_Pool_Paged Bytes: 30720456, Process_IO Read_Operations_sec: 8.199752613, Process_Working_Set_ Private: 1733455872, Process_Working_Set_Peak: 5756063744, Process_IO_Write Operations_sec: 8.799734512, Process_Page_File Bytes: 2929295360, Process_pct_ User_Time: 11.87476524, Process_Virtual_Bytes Peak: 2.51E+14, Process_Page_File Bytes Peak: 3935072256, Process_IO_Other_Bytes_sec: 4023.278618, Process_Private_Bytes: 2929295360, Process_IO_Write_Bytes_sec: 9177.32312, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 2.51E+14, Process_pct_ Processor_Time: 199.6835523, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2873608, Process_Working Set: 3320582144, Process_Page Faults_sec: 1227.06298, Process_ID Process: 0, Process_IO Other Operations_sec: 90.39727271, Process_IO Data Operations_sec: 16.99948713, Process_Thread Count: 1431, Process_pct_ Privileged_Time: 187.808787, Process_IO Data Bytes_sec: 11801.24396, Process_IO Read Bytes_sec: 2623.920836, Process_Priority Base: 0, Process_Handle Count: 51796, Network_I(Intel R _82574L_GNC)TCP_APS: 10146, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 2626.620755, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 151.1954384, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 2777.816193, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 2.799915527, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 5.099846138, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 7.899761664, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 3, Network_I(Intel R _82574L_GNC) Packets Sent sec: 2.799915527, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 5.099846138, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 146120704, Memory Free & Zero Page List Bytes: 397193216, Memory Cache Bytes Peak: 199274496, Memory System Code Resident Bytes: 0, Memory Available Bytes: 789401600, Memory Commit Limit: 5770170368, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 715.9783989, Memory Available KBytes: 770900, Memory Pages sec: 0, Memory Cache Bytes: 28594176, Memory Pool Nonpaged Bytes: 102244352, Memory Page Faults sec: 1227.06298, Memory Transition Faults sec: 545.2835488, Memory System Cache Resident Bytes: 28594176, Memory Long-Term Average Standby Cache Lifetime (s): 9178, Memory Standby Cache Reserve Bytes: 105910272, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 201707520, Memory System Driver Resident Bytes: 5021696, Memory Standby Cache Normal Priority Bytes: 84590592, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 75.60872074, Memory Free System Page Table Entries: 12263384, Memory Available MBytes: 752, Memory Modified Page List Bytes: 35254272, Memory Cache Faults sec: 0, Memory Committed Bytes: 4362752000, Memory System Driver Total Bytes: 18079744, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 88727552, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 22118.4, LogicalDisk(_Total) pct_ Idle Time: 99.99208116, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 81.72801141, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 0.499984915, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 167267, LogicalDisk(_Total) Avg  Disk sec Write: 0.00050814, LogicalDisk(_Total) Disk Bytes sec: 11058.86635, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.008468833, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000254065, LogicalDisk(_Total) Avg  Disk Queue Length: 0.000254065, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 11058.86635, LogicalDisk(_Total) Disk Transfers sec: 0.499984915, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 22118.4, LogicalDisk(_Total) pct_ Disk Write Time: 0.008468833, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.00050814

[Assistant] attack


[User] PID: 4372, MINFLT: 2075, MAJFLT: 0, VSTEXT: 148, VSIZE: 17644, RSIZE: 2440, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 49086, dst_ip: 52.28.231.150, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] Processor(_Total) DPC Rate: 71, Processor(_Total) pct_ Idle Time: 78.33333333, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.104166667, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 1.875, Processor(_Total) pct_ C1 Time: 80, Processor(_Total) pct_ Processor Time: 21.66666667, Processor(_Total) C1 Transitions sec: 3041.164759, Processor(_Total) pct_ DPC Time: 0.416666667, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 19.79166667, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 2843.162713, Processor(_Total) Interrupts sec: 4032.041664, Process(_Total) Pool Paged Bytes: 8064208, Process(_Total) IO Read Operations sec: 3.933373978, Process(_Total) Working Set - Private: 798584832, Process(_Total) Working Set Peak: 2013310976, Process(_Total) IO Write Operations sec: 7.733413245, Process(_Total) Page File Bytes: 2058563584, Process(_Total) pct_ User Time: 1.875, Process(_Total) Virtual Bytes Peak: 8129257472, Process(_Total) Page File Bytes Peak: 2652372992, Process(_Total) IO Other Bytes sec: 4492.713091, Process(_Total) Private Bytes: 2058563584, Process(_Total) IO Write Bytes sec: 10361.77374, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6837493760, Process(_Total) pct_ Processor Time: 99.47916667, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1276680, Process(_Total) Working Set: 853852160, Process(_Total) Page Faults sec: 4404.178843, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 179.8685253, Process(_Total) IO Data Operations sec: 11.66678722, Process(_Total) Thread Count: 554, Process(_Total) pct_ Privileged Time: 97.60416667, Process(_Total) IO Data Bytes sec: 15751.82944, Process(_Total) IO Read Bytes sec: 5390.055697, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13831, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 7688.746117, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 162.5350129, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 7851.28113, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 2.600026867, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 6.600068201, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 9.200095068, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 2.600026867, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 6.600068201, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 92880896, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 786432, Memory Available Bytes: 4440064, Memory Commit Limit: 2918703104, Memory Transition Pages RePurposed sec: 4833.049942, Memory Pages Output sec: 2784.762109, Memory Page Reads sec: 2703.027931, Memory Demand Zero Faults sec: 786.0747894, Memory Available KBytes: 4336, Memory Pages sec: 8547.688326, Memory Cache Bytes: 581632, Memory Pool Nonpaged Bytes: 52699136, Memory Page Faults sec: 4518.513358, Memory Transition Faults sec: 1026.543941, Memory System Cache Resident Bytes: 581632, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 238.7358003, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 401408, Memory System Driver Resident Bytes: 1421312, Memory Standby Cache Normal Priority Bytes: 4038656, Memory Pool Paged Allocs: 58747, Memory Pool Nonpaged Allocs: 51643, Memory pct_ Committed Bytes In Use: 82.55184725, Memory Free System Page Table Entries: 33562140, Memory Available MBytes: 4, Memory Modified Page List Bytes: 40960, Memory Cache Faults sec: 4.800049601, Memory Committed Bytes: 2409443328, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 5762.926217, Memory Pool Paged Resident Bytes: 14917632, Memory Write Copies sec: 0

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 47658, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.02421, src_bytes: 258, dst_bytes: 1919, conn_state: SF, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 578, dst_pkts: 6, dst_ip_bytes: 2239, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 1-Apr-19, time:   21:05:59   , fridge_temperature: 9, temp_condition: high

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 56188, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: -, duration: 0.000011, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:39:04, latitude: 0.002281895, longitude: 10.03492556

[Assistant] normal


[User] PID: 3028, MINFLT: 0, MAJFLT: 0, VSTEXT: 0, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: kworker/1:2-cg

[Assistant] attack


[User] PID: 2498, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: upstart-dbus-b

[Assistant] normal


[User] src_ip: 172.17.0.7, src_port: 57414, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000792, src_bytes: 0, dst_bytes: 212, conn_state: SHR, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 2, dst_ip_bytes: 268, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 28-Apr-19, time:  05:19:23 , latitude: 29.09466905, longitude: 38.68382885

[Assistant] attack


[User] Processor_DPC_Rate: 4, Processor_pct_ Idle_Time: 58.41230951, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.2340187, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 26.67813174, Processor_pct_ C1_Time: 58.41230951, Processor_pct_ Processor_Time: 31.58853351, Processor_C1_ransitions_sec: 617.5883277, Processor_pct_ DPC_Time: 0.078006233, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 4.91439269, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 310.7896027, Processor_Interrupts_sec: 1078.933792, Process_Pool_Paged Bytes: 16208504, Process_IO Read_Operations_sec: 49.28733988, Process_Working_Set_ Private: 643792896, Process_Working_Set_Peak: 4922265600, Process_IO_Write Operations_sec: 36.61630311, Process_Page_File Bytes: 1687638016, Process_pct_ User_Time: 53.35626349, Process_Virtual_Bytes Peak: 1.23E+14, Process_Page_File Bytes Peak: 4173606912, Process_IO_Other_Bytes_sec: 132699.4779, Process_Private_Bytes: 1687638016, Process_IO_Write_Bytes_sec: 246041.2034, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.23E+14, Process_pct_ Processor_Time: 199.383932, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 1834184, Process_Working Set: 1441812480, Process_Page Faults_sec: 2348.13268, Process_ID Process: 0, Process_IO Other Operations_sec: 1529.1048, Process_IO Data Operations_sec: 85.90364299, Process_Thread Count: 853, Process_pct_ Privileged_Time: 146.0276685, Process_IO Data Bytes_sec: 576843.9604, Process_IO Read Bytes_sec: 330802.757, Process_Priority Base: 0, Process_Handle Count: 33109, Network_I(Intel R _82574L_GNC)TCP_APS: 0, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 2413.383531, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 161.6305478, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 2575.014079, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 2.993158292, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 5.487456869, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 8.480615162, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 0, Network_I(Intel R _82574L_GNC) Packets Sent sec: 2.993158292, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 5.487456869, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 359366656, Memory Free & Zero Page List Bytes: 28733440, Memory Cache Bytes Peak: 815652864, Memory System Code Resident Bytes: 2437120, Memory Available Bytes: 412819456, Memory Commit Limit: 3354243072, Memory Transition Pages RePurposed sec: 803.9623173, Memory Pages Output sec: 0, Memory Page Reads sec: 98.07582005, Memory Demand Zero Faults sec: 2314.509536, Memory Available KBytes: 403144, Memory Pages sec: 332.7394302, Memory Cache Bytes: 39645184, Memory Pool Nonpaged Bytes: 88748032, Memory Page Faults sec: 2708.908027, Memory Transition Faults sec: 242.0467339, Memory System Cache Resident Bytes: 0, Memory Long-Term Average Standby Cache Lifetime (s): 105, Memory Standby Cache Reserve Bytes: 145494016, Memory Page Writes sec: 0, Memory System Code Total Bytes: 3825664, Memory Standby Cache Core Bytes: 118923264, Memory System Driver Resident Bytes: 6434816, Memory Standby Cache Normal Priority Bytes: 119668736, Memory Pool Paged Allocs: 229627, Memory Pool Nonpaged Allocs: 135271, Memory pct_ Committed Bytes In Use: 75.4202858, Memory Free System Page Table Entries: 12205222, Memory Available MBytes: 393, Memory Modified Page List Bytes: 4263936, Memory Cache Faults sec: 209.7206243, Memory Committed Bytes: 2529779712, Memory System Driver Total Bytes: 17039360, Memory Pages Input sec: 332.7394302, Memory Pool Paged Resident Bytes: 142082048, Memory Write Copies sec: 0.099771943, LogicalDisk(_Total) Avg  Disk Bytes Write: 13931.97279, LogicalDisk(_Total) pct_ Idle Time: 56.01267802, LogicalDisk(_Total) Disk Reads sec: 86.60204659, LogicalDisk(_Total) pct_ Free Space: 85.0965183, LogicalDisk(_Total) Disk Read Bytes sec: 1262726.482, LogicalDisk(_Total) Avg  Disk sec Read: 0.000621681, LogicalDisk(_Total) Disk Writes sec: 58.66590253, LogicalDisk(_Total) Current Disk Queue Length: 1, LogicalDisk(_Total) Split IO Sec: 0.498859715, LogicalDisk(_Total) Free Megabytes: 173996, LogicalDisk(_Total) Avg  Disk sec Write: 0.006628898, LogicalDisk(_Total) Disk Bytes sec: 2080058.24, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.053879886, LogicalDisk(_Total) pct_ Disk Time: 44.30665479, LogicalDisk(_Total) Avg  Disk Bytes Read: 14580.79263, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.389186662, LogicalDisk(_Total) Avg  Disk Queue Length: 0.443066548, LogicalDisk(_Total) pct_ Disk Read Time: 5.387988626, LogicalDisk(_Total) Disk Write Bytes sec: 817331.7577, LogicalDisk(_Total) Disk Transfers sec: 145.2679491, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 14318.76923, LogicalDisk(_Total) pct_ Disk Write Time: 38.91866616, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.003047673

[Assistant] normal


[User] src_ip: 192.168.1.37, src_port: 45003, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: RSTRH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:    04:01:43   , fridge_temperature: 9.1, temp_condition: high

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 38180, dst_ip: 192.168.1.184, dst_port: 21, proto: tcp, service: -, duration: 0.040194, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 60, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3897, RDDSK: 0, WRDSK: 4, WCANCL: 0, DSK: 0.09, CMD: atop, attack: 1

[Assistant] attack


[User] PID: 1668, MINFLT: 0, MAJFLT: 0, VSTEXT: 12, VSIZE: 9480, RSIZE: 292, VGROW: 0, RGROW: 0, MEM: 0, CMD: haveged

[Assistant] normal


[User] PID: 4065, RDDSK: 0, WRDSK: 4, WCANCL: 0, DSK: 0.01, CMD: atop, attack: 1

[Assistant] attack


[User] PID: 3793, MINFLT: 0, MAJFLT: 0, VSTEXT: 978, VSIZE: 2.9, RSIZE: 11200, VGROW: 0, RGROW: 0, MEM: 0, CMD: drone

[Assistant] normal


[User] date: 31-Mar-19, time:    12:37:40   , fridge_temperature: 5, temp_condition: low

[Assistant] normal


[User] src_ip: 192.168.1.33, src_port: 37791, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 1500, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1410, TRUN: 0, TSLPI: 0, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: I, CPU: 0, CMD: kworker/0:3-mm

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 58429, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.000033, src_bytes: 74, dst_bytes: 90, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 130, dst_pkts: 2, dst_ip_bytes: 146, dns_query: testphp.vulnweb.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 34268, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000039, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 78.12124564, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 20.31244556, Processor_pct_ C1_Time: 78.12124564, Processor_pct_ Processor_Time: 21.40646063, Processor_C1_ransitions_sec: 142.7996444, Processor_pct_ DPC_Time: 0, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 1.093747069, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 27.99993028, Processor_Interrupts_sec: 516.6987134, Process_Pool_Paged Bytes: 22017608, Process_IO Read_Operations_sec: 0, Process_Working_Set_ Private: 1665867776, Process_Working_Set_Peak: 5544603648, Process_IO_Write Operations_sec: 0, Process_Page_File Bytes: 2757636096, Process_pct_ User_Time: 40.62489113, Process_Virtual_Bytes Peak: 1.52E+14, Process_Page_File Bytes Peak: 3789012992, Process_IO_Other_Bytes_sec: 5292.286822, Process_Private_Bytes: 2757636096, Process_IO_Write_Bytes_sec: 0, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.52E+14, Process_pct_ Processor_Time: 199.999464, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2295360, Process_Working Set: 2221645824, Process_Page Faults_sec: 592.3985249, Process_ID Process: 0, Process_IO Other Operations_sec: 71.39982221, Process_IO Data Operations_sec: 0, Process_Thread Count: 951, Process_pct_ Privileged_Time: 159.3745729, Process_IO Data Bytes_sec: 0, Process_IO Read Bytes_sec: 0, Process_Priority Base: 0, Process_Handle Count: 38344, Network_I(Intel R _82574L_GNC)TCP_APS: 5295, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4821.887993, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 259.1993546, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5081.087348, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 4.799988048, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 8.099979831, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 12.89996788, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 2, Network_I(Intel R _82574L_GNC) Packets Sent sec: 4.799988048, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 8.099979831, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 106708992, Memory Free & Zero Page List Bytes: 9338880, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 421089280, Memory Commit Limit: 8473149440, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0.599998506, Memory Demand Zero Faults sec: 725.698193, Memory Available KBytes: 411220, Memory Pages sec: 7.699980827, Memory Cache Bytes: 14409728, Memory Pool Nonpaged Bytes: 89124864, Memory Page Faults sec: 592.3985249, Memory Transition Faults sec: 32.09992007, Memory System Cache Resident Bytes: 14409728, Memory Long-Term Average Standby Cache Lifetime (s): 21, Memory Standby Cache Reserve Bytes: 102064128, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 162004992, Memory System Driver Resident Bytes: 4169728, Memory Standby Cache Normal Priority Bytes: 147681280, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 42.42695683, Memory Free System Page Table Entries: 12210476, Memory Available MBytes: 401, Memory Modified Page List Bytes: 5349376, Memory Cache Faults sec: 0, Memory Committed Bytes: 3594899456, Memory System Driver Total Bytes: 18202624, Memory Pages Input sec: 7.699980827, Memory Pool Paged Resident Bytes: 70045696, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 9557.333333, LogicalDisk(_Total) pct_ Idle Time: 99.99111602, LogicalDisk(_Total) Disk Reads sec: 0.499998755, LogicalDisk(_Total) pct_ Free Space: 81.31416035, LogicalDisk(_Total) Disk Read Bytes sec: 31948.72045, LogicalDisk(_Total) Avg  Disk sec Read: 0.00053412, LogicalDisk(_Total) Disk Writes sec: 0.299999253, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 166420, LogicalDisk(_Total) Avg  Disk sec Write: 0.000306033, LogicalDisk(_Total) Disk Bytes sec: 34815.91331, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.000267059, LogicalDisk(_Total) pct_ Disk Time: 0.011962968, LogicalDisk(_Total) Avg  Disk Bytes Read: 63897.6, LogicalDisk(_Total) Avg  Disk Write Queue Length: 9.18E-05, LogicalDisk(_Total) Avg  Disk Queue Length: 0.000358869, LogicalDisk(_Total) pct_ Disk Read Time: 0.008901976, LogicalDisk(_Total) Disk Write Bytes sec: 2867.192861, LogicalDisk(_Total) Disk Transfers sec: 0.799998008, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 43520, LogicalDisk(_Total) pct_ Disk Write Time: 0.003059992, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000448587

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 57954, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.018391, src_bytes: 60, dst_bytes: 401, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 116, dst_pkts: 2, dst_ip_bytes: 457, dns_query: ei.rlcdn.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 71.63009957, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.078127549, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 15.46925461, Processor_pct_ C1_Time: 71.63009957, Processor_pct_ Processor_Time: 25.77882891, Processor_C1_ransitions_sec: 407.4188594, Processor_pct_ DPC_Time: 0.078127549, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 10.3128364, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 60.30279142, Processor_Interrupts_sec: 833.4385799, Process_Pool_Paged Bytes: 31439992, Process_IO Read_Operations_sec: 171.007916, Process_Working_Set_ Private: 1453121536, Process_Working_Set_Peak: 5442568192, Process_IO_Write Operations_sec: 10.90050458, Process_Page_File Bytes: 2535055360, Process_pct_ User_Time: 30.93850921, Process_Virtual_Bytes Peak: 2.58E+14, Process_Page_File Bytes Peak: 3484008448, Process_IO_Other_Bytes_sec: 64778.39859, Process_Private_Bytes: 2535055360, Process_IO_Write_Bytes_sec: 13222.41207, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 2.58E+14, Process_pct_ Processor_Time: 199.3815038, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2879960, Process_Working Set: 3596455936, Process_Page Faults_sec: 4378.202667, Process_ID Process: 0, Process_IO Other Operations_sec: 833.7385938, Process_IO Data Operations_sec: 181.9084205, Process_Thread Count: 1477, Process_pct_ Privileged_Time: 168.4429946, Process_IO Data Bytes_sec: 108424.819, Process_IO Read Bytes_sec: 95202.40692, Process_Priority Base: 0, Process_Handle Count: 52518, Network_I(Intel R _82574L_GNC)TCP_APS: 10343, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 2409.111518, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 144.6066938, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 2553.718212, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 2.700124989, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 3.900180539, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 6.600305528, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 4, Network_I(Intel R _82574L_GNC) Packets Sent sec: 2.700124989, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 3.900180539, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 146964480, Memory Free & Zero Page List Bytes: 265838592, Memory Cache Bytes Peak: 199274496, Memory System Code Resident Bytes: 0, Memory Available Bytes: 659714048, Memory Commit Limit: 5770170368, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 31.90147672, Memory Demand Zero Faults sec: 1554.471957, Memory Available KBytes: 644252, Memory Pages sec: 143.9066614, Memory Cache Bytes: 29147136, Memory Pool Nonpaged Bytes: 100999168, Memory Page Faults sec: 4507.508653, Memory Transition Faults sec: 2870.232863, Memory System Cache Resident Bytes: 29147136, Memory Long-Term Average Standby Cache Lifetime (s): 2330, Memory Standby Cache Reserve Bytes: 78868480, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 195440640, Memory System Driver Resident Bytes: 5234688, Memory Standby Cache Normal Priority Bytes: 119566336, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 73.11200916, Memory Free System Page Table Entries: 12263399, Memory Available MBytes: 629, Memory Modified Page List Bytes: 14778368, Memory Cache Faults sec: 102.6047496, Memory Committed Bytes: 4218687488, Memory System Driver Total Bytes: 18079744, Memory Pages Input sec: 143.9066614, Memory Pool Paged Resident Bytes: 97808384, Memory Write Copies sec: 43.90203223, LogicalDisk(_Total) Avg  Disk Bytes Write: 10442.4186, LogicalDisk(_Total) pct_ Idle Time: 99.59920193, LogicalDisk(_Total) Disk Reads sec: 31.70146746, LogicalDisk(_Total) pct_ Free Space: 81.7573279, LogicalDisk(_Total) Disk Read Bytes sec: 585499.1028, LogicalDisk(_Total) Avg  Disk sec Read: 0.000348012, LogicalDisk(_Total) Disk Writes sec: 4.300199056, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.100004629, LogicalDisk(_Total) Free Megabytes: 167327, LogicalDisk(_Total) Avg  Disk sec Write: 0.000225712, LogicalDisk(_Total) Disk Bytes sec: 630403.5814, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.01103235, LogicalDisk(_Total) pct_ Disk Time: 0.400098051, LogicalDisk(_Total) Avg  Disk Bytes Read: 18469.14826, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000970592, LogicalDisk(_Total) Avg  Disk Queue Length: 0.012002942, LogicalDisk(_Total) pct_ Disk Read Time: 0.367744996, LogicalDisk(_Total) Disk Write Bytes sec: 44904.47863, LogicalDisk(_Total) Disk Transfers sec: 36.00166652, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 17510.4, LogicalDisk(_Total) pct_ Disk Write Time: 0.032353055, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000333404

[Assistant] attack


[User] PID: 2768, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: indicator-appl, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 8, dst_ip: 192.168.1.195, dst_port: 0, proto: icmp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 28, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2849, MINFLT: 8, MAJFLT: 0, VSTEXT: 1350, VSIZE: 1.4, RSIZE: 48316, VGROW: 0, RGROW: 0, MEM: 0.01, CMD: nautilus

[Assistant] attack


[User] PID: 1247, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: mysqld, attack: 1

[Assistant] attack


[User] PID: 52887, MINFLT: 1976, MAJFLT: 0, VSTEXT: 148, VSIZE: 17880, RSIZE: 2596, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] attack


[User] PID: 4083, MINFLT: 0, MAJFLT: 0, VSTEXT: 0, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: <vsftpd>

[Assistant] attack


[User] PID: 1403, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vmtoolsd, attack: 1

[Assistant] attack


[User] PID: 4423, TRUN: 0, TSLPI: 5, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0.2, CMD: wireshark

[Assistant] normal


[User] date: 31-Mar-19, time:    12:42:22   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] PID: 11342, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: systemd-udevd, attack: 0

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:34, FC1_Read_Input_Register: 62538, FC2_Read_Discrete_Value: 3303, FC3_Read_Holding_Register: 9178, FC4_Read_Coil: 20944

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 81.37323861, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 16.45798939, Processor_pct_ C1_Time: 81.37323861, Processor_pct_ Processor_Time: 17.63205312, Processor_C1_ransitions_sec: 133.6864266, Processor_pct_ DPC_Time: 0, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 1.169999246, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 23.56235748, Processor_Interrupts_sec: 427.4171711, Process_Pool_Paged Bytes: 19902432, Process_IO Read_Operations_sec: 0, Process_Working_Set_ Private: 1322917888, Process_Working_Set_Peak: 4983906304, Process_IO_Write Operations_sec: 0.599042987, Process_Page_File Bytes: 2234880000, Process_pct_ User_Time: 32.91597877, Process_Virtual_Bytes Peak: 1.44E+14, Process_Page_File Bytes Peak: 3283021824, Process_IO_Other_Bytes_sec: 2508.89187, Process_Private_Bytes: 2234880000, Process_IO_Write_Bytes_sec: 7819.308108, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.44E+14, Process_pct_ Processor_Time: 199.991871, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 1999600, Process_Working Set: 1843314688, Process_Page Faults_sec: 450.4803261, Process_ID Process: 0, Process_IO Other Operations_sec: 44.92822402, Process_IO Data Operations_sec: 0.599042987, Process_Thread Count: 894, Process_pct_ Privileged_Time: 167.0758923, Process_IO Data Bytes_sec: 7819.308108, Process_IO Read Bytes_sec: 0, Process_Priority Base: 0, Process_Handle Count: 35633, Network_I(Intel R _82574L_GNC)TCP_APS: 4947, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4863.330489, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 237.0213418, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5100.351831, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 4.293141406, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 7.887399327, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 12.18054073, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 2, Network_I(Intel R _82574L_GNC) Packets Sent sec: 4.293141406, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 7.887399327, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 106512384, Memory Free & Zero Page List Bytes: 53174272, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 796848128, Memory Commit Limit: 8460087296, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 554.2146034, Memory Available KBytes: 778172, Memory Pages sec: 0, Memory Cache Bytes: 13672448, Memory Pool Nonpaged Bytes: 90898432, Memory Page Faults sec: 450.4803261, Memory Transition Faults sec: 4.392981904, Memory System Cache Resident Bytes: 13672448, Memory Long-Term Average Standby Cache Lifetime (s): 16, Memory Standby Cache Reserve Bytes: 426364928, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 162975744, Memory System Driver Resident Bytes: 4308992, Memory Standby Cache Normal Priority Bytes: 154333184, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 36.8219338, Memory Free System Page Table Entries: 4294967295, Memory Available MBytes: 759, Memory Modified Page List Bytes: 17305600, Memory Cache Faults sec: 0, Memory Committed Bytes: 3115167744, Memory System Driver Total Bytes: 18223104, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 71118848, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 14848, LogicalDisk(_Total) pct_ Idle Time: 99.97900666, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 81.27898057, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 0.798723983, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 166348, LogicalDisk(_Total) Avg  Disk sec Write: 0.000740488, LogicalDisk(_Total) Disk Bytes sec: 11859.45369, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.019715392, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000591442, LogicalDisk(_Total) Avg  Disk Queue Length: 0.000591442, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 11859.45369, LogicalDisk(_Total) Disk Transfers sec: 0.798723983, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 14848, LogicalDisk(_Total) pct_ Disk Write Time: 0.019715392, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000740488

[Assistant] normal


[User] PID: 2517, MINFLT: 0, MAJFLT: 0, VSTEXT: 23, VSIZE: 192, RSIZE: 2132, VGROW: 0, RGROW: 8, MEM: 0, CMD: gvfsd

[Assistant] normal


[User] PID: 1851, TRUN: 0, TSLPI: 2, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: vmtoolsd

[Assistant] normal


[User] PID: 1668, MINFLT: 0, MAJFLT: 0, VSTEXT: 12, VSIZE: 9480, RSIZE: 292, VGROW: 0, RGROW: 0, MEM: 0, CMD: haveged

[Assistant] normal


[User] PID: 2540, MINFLT: 2, MAJFLT: 0, VSTEXT: 66, VSIZE: 553.8, RSIZE: 18560, VGROW: 0, RGROW: 0, MEM: 0, CMD: unity-panel-se

[Assistant] attack


[User] Processor(_Total) DPC Rate: 67, Processor(_Total) pct_ Idle Time: 79.6875, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 0.833333333, Processor(_Total) pct_ C1 Time: 80, Processor(_Total) pct_ Processor Time: 20.3125, Processor(_Total) C1 Transitions sec: 3266.502968, Processor(_Total) pct_ DPC Time: 0.104166667, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 19.47916667, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 3031.100352, Processor(_Total) Interrupts sec: 4195.713295, Process(_Total) Pool Paged Bytes: 8182712, Process(_Total) IO Read Operations sec: 2.266691857, Process(_Total) Working Set - Private: 785944576, Process(_Total) Working Set Peak: 2027819008, Process(_Total) IO Write Operations sec: 1.666685189, Process(_Total) Page File Bytes: 2054217728, Process(_Total) pct_ User Time: 0.833333333, Process(_Total) Virtual Bytes Peak: 8235687936, Process(_Total) Page File Bytes Peak: 2687225856, Process(_Total) IO Other Bytes sec: 15265.30298, Process(_Total) Private Bytes: 2054217728, Process(_Total) IO Write Bytes sec: 5161.190691, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6938701824, Process(_Total) pct_ Processor Time: 99.89583333, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1086136, Process(_Total) Working Set: 844619776, Process(_Total) Page Faults sec: 3659.90734, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 752.5416966, Process(_Total) IO Data Operations sec: 3.933377046, Process(_Total) Thread Count: 581, Process(_Total) pct_ Privileged Time: 99.0625, Process(_Total) IO Data Bytes sec: 5401.9267, Process(_Total) IO Read Bytes sec: 240.7360087, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 14163, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 312.0701348, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 102.6678076, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 414.7379425, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 1.466682966, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 2.46669408, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 3.933377046, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 1.466682966, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 2.46669408, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 92807168, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 806912, Memory Available Bytes: 18415616, Memory Commit Limit: 2918703104, Memory Transition Pages RePurposed sec: 4854.520617, Memory Pages Output sec: 2259.291775, Memory Page Reads sec: 2784.430944, Memory Demand Zero Faults sec: 83.60092908, Memory Available KBytes: 17984, Memory Pages sec: 8007.088985, Memory Cache Bytes: 520192, Memory Pool Nonpaged Bytes: 52482048, Memory Page Faults sec: 3767.508536, Memory Transition Faults sec: 902.276694, Memory System Cache Resident Bytes: 520192, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 266.8029651, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 380928, Memory System Driver Resident Bytes: 1310720, Memory Standby Cache Normal Priority Bytes: 18034688, Memory Pool Paged Allocs: 59365, Memory Pool Nonpaged Allocs: 52301, Memory pct_ Committed Bytes In Use: 82.5891767, Memory Free System Page Table Entries: 33562140, Memory Available MBytes: 17, Memory Modified Page List Bytes: 65536, Memory Cache Faults sec: 1.466682966, Memory Committed Bytes: 2410532864, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 5747.797211, Memory Pool Paged Resident Bytes: 10539008, Memory Write Copies sec: 0

[Assistant] normal


[User] PID: 7129, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: systemd-udevd, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.37, src_port: 36459, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 60, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.6, src_port: 5353, dst_ip: 224.0.0.251, dst_port: 5353, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 89, dst_pkts: 0, dst_ip_bytes: 0, dns_query: _googlecast._tcp.local, dns_qclass: 1, dns_qtype: 12, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 48767, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.016595, src_bytes: 66, dst_bytes: 110, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 122, dst_pkts: 2, dst_ip_bytes: 166, dns_query: ssl.gstatic.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1248, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: politd, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 43077, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.002284, src_bytes: 35, dst_bytes: 67, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 63, dst_pkts: 1, dst_ip_bytes: 95, dns_query: broker.hivemq.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 33363, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000107, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: bad_UDP_checksum, weird_addl: -, weird_notice: F

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:54, temperature: 41.09438467, pressure: 1.022203764, humidity: 76.20656509

[Assistant] normal


[User] date: 27-Apr-19, time:  05:11:15 , fridge_temperature: 4, temp_condition: low

[Assistant] attack


[User] PID: 2797, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: nautilus, attack: 0

[Assistant] normal


[User] PID: 1401, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: 0, EXC: 0, State: S, CPU: 0, CMD: irqbalance

[Assistant] attack


[User] date: 27-Apr-19, time:  05:15:26 , fridge_temperature: 9.95, temp_condition: high

[Assistant] attack


[User] PID: 2731, MINFLT: 0, MAJFLT: 0, VSTEXT: 35, VSIZE: 280.1, RSIZE: 5144, VGROW: 0, RGROW: 0, MEM: 0, CMD: indicator-appl

[Assistant] attack


[User] date: 27-Apr-19, time:  05:26:41 , fridge_temperature: 5.75, temp_condition: low

[Assistant] attack


[User] src_ip: 192.168.1.33, src_port: 46349, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 61172, dst_ip: 192.168.1.186, dst_port: 3322, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.79, src_port: 60569, dst_ip: 192.168.1.255, dst_port: 15600, proto: udp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 63, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 1457, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: 0, EXC: 0, State: S, CPU: 0.01, CMD: Xorg

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 58450, dst_ip: 101.119.11.17, dst_port: 80, proto: tcp, service: http, duration: 165.740875, src_bytes: 576, dst_bytes: 768, conn_state: SF, missed_bytes: 0, src_pkts: 23, src_ip_bytes: 1780, dst_pkts: 20, dst_ip_bytes: 1816, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 26-Apr-19, time: 16:08:43, motion_status: 0, light_status:  off

[Assistant] attack


[User] PID: 4374, MINFLT: 2072, MAJFLT: 0, VSTEXT: 148, VSIZE: 17948, RSIZE: 2480, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] Processor(_Total) DPC Rate: 76, Processor(_Total) pct_ Idle Time: 77.29166667, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.104166667, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 0.625, Processor(_Total) pct_ C1 Time: 80, Processor(_Total) pct_ Processor Time: 22.70833333, Processor(_Total) C1 Transitions sec: 3310.284454, Processor(_Total) pct_ DPC Time: 0.208333333, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 22.08333333, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 3132.750167, Processor(_Total) Interrupts sec: 4319.356543, Process(_Total) Pool Paged Bytes: 7712688, Process(_Total) IO Read Operations sec: 2.266678846, Process(_Total) Working Set - Private: 784044032, Process(_Total) Working Set Peak: 2033659904, Process(_Total) IO Write Operations sec: 1.666675622, Process(_Total) Page File Bytes: 2096590848, Process(_Total) pct_ User Time: 0.625, Process(_Total) Virtual Bytes Peak: 7989231616, Process(_Total) Page File Bytes Peak: 2721607680, Process(_Total) IO Other Bytes sec: 12738.60178, Process(_Total) Private Bytes: 2096590848, Process(_Total) IO Write Bytes sec: 1358.740634, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6729490432, Process(_Total) pct_ Processor Time: 99.6875, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1044608, Process(_Total) Working Set: 837492736, Process(_Total) Page Faults sec: 4009.621545, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 611.4032853, Process(_Total) IO Data Operations sec: 3.933354469, Process(_Total) Thread Count: 550, Process(_Total) pct_ Privileged Time: 99.0625, Process(_Total) IO Data Bytes sec: 1599.475261, Process(_Total) IO Read Bytes sec: 240.7346269, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13711, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 208.6677879, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 136.9340691, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 345.601857, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 1.400007523, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 1.400007523, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 2.800015045, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 1.400007523, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 1.400007523, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 92647424, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 737280, Memory Available Bytes: 1351680, Memory Commit Limit: 2918703104, Memory Transition Pages RePurposed sec: 5187.227873, Memory Pages Output sec: 2432.613071, Memory Page Reads sec: 2891.482204, Memory Demand Zero Faults sec: 86.73379938, Memory Available KBytes: 1320, Memory Pages sec: 8179.91062, Memory Cache Bytes: 430080, Memory Pool Nonpaged Bytes: 77246464, Memory Page Faults sec: 4143.155596, Memory Transition Faults sec: 1166.3396, Memory System Cache Resident Bytes: 430080, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 272.5347978, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 364544, Memory System Driver Resident Bytes: 1392640, Memory Standby Cache Normal Priority Bytes: 987136, Memory Pool Paged Allocs: 59021, Memory Pool Nonpaged Allocs: 57482, Memory pct_ Committed Bytes In Use: 84.43066966, Memory Free System Page Table Entries: 33562140, Memory Available MBytes: 1, Memory Modified Page List Bytes: 32768, Memory Cache Faults sec: 1.333340498, Memory Committed Bytes: 2464280576, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 5747.297549, Memory Pool Paged Resident Bytes: 11481088, Memory Write Copies sec: 0

[Assistant] normal


[User] PID: 3257, TRUN: 0, TSLPI: 22, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0.13, CMD: Web-Content

[Assistant] normal


[User] src_ip: 192.168.1.190, src_port: 64268, dst_ip: 204.61.216.50, dst_port: 53, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 82, dst_pkts: 0, dst_ip_bytes: 0, dns_query: 67.61.211.23.in-addr.arpa, dns_qclass: 1, dns_qtype: 12, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 28-Apr-19, time:  17:02:27 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] PID: 1825, MINFLT: 0, MAJFLT: 0, VSTEXT: 56, VSIZE: 27456, RSIZE: 740, VGROW: 0, RGROW: 0, MEM: 0, CMD: qmgr

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:10, FC1_Read_Input_Register: 54159, FC2_Read_Discrete_Value: 20239, FC3_Read_Holding_Register: 20907, FC4_Read_Coil: 31190

[Assistant] normal


[User] src_ip: 192.168.1.103, src_port: 59942, dst_ip: 224.0.0.252, dst_port: 5355, proto: udp, service: dns, duration: 0.410591, src_bytes: 66, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 122, dst_pkts: 0, dst_ip_bytes: 0, dns_query: desktop-18ss3ba, dns_qclass: 1, dns_qtype: 255, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.37, src_port: 4444, dst_ip: 192.168.1.193, dst_port: 49158, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 1112, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 74, dst_ip: 192.168.1.152, dst_port: 74, proto: tcp, service: -, duration: 0.000301, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 41250, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 2.265234, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 3, src_ip_bytes: 156, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] Processor(_Total) DPC Rate: 82, Processor(_Total) pct_ Idle Time: 80.10416667, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.208333333, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 1.041666667, Processor(_Total) pct_ C1 Time: 80, Processor(_Total) pct_ Processor Time: 19.89583333, Processor(_Total) C1 Transitions sec: 3387.524119, Processor(_Total) pct_ DPC Time: 0.416666667, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 18.85416667, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 3101.06387, Processor(_Total) Interrupts sec: 4263.304502, Process(_Total) Pool Paged Bytes: 8043384, Process(_Total) IO Read Operations sec: 13.93302123, Process(_Total) Working Set - Private: 751575040, Process(_Total) Working Set Peak: 2072117248, Process(_Total) IO Write Operations sec: 1.933290028, Process(_Total) Page File Bytes: 1959190528, Process(_Total) pct_ User Time: 1.041666667, Process(_Total) Virtual Bytes Peak: 8134144000, Process(_Total) Page File Bytes Peak: 2316779520, Process(_Total) IO Other Bytes sec: 6533.986972, Process(_Total) Private Bytes: 1959190528, Process(_Total) IO Write Bytes sec: 1621.163686, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6961258496, Process(_Total) pct_ Processor Time: 99.375, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1132960, Process(_Total) Working Set: 810348544, Process(_Total) Page Faults sec: 4088.641748, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 271.1939253, Process(_Total) IO Data Operations sec: 15.86631126, Process(_Total) Thread Count: 560, Process(_Total) pct_ Privileged Time: 98.33333333, Process(_Total) IO Data Bytes sec: 2153.751756, Process(_Total) IO Read Bytes sec: 532.58807, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 14070, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 314.3262924, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 110.3308619, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 424.6571543, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 1.066642774, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 1.866624854, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 2.933267628, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 1.066642774, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 1.866624854, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 97325056, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 80883712, Memory System Code Resident Bytes: 765952, Memory Available Bytes: 5144576, Memory Commit Limit: 2584522752, Memory Transition Pages RePurposed sec: 4626.763027, Memory Pages Output sec: 1938.623242, Memory Page Reads sec: 2915.401362, Memory Demand Zero Faults sec: 134.5303199, Memory Available KBytes: 5024, Memory Pages sec: 7304.503046, Memory Cache Bytes: 421888, Memory Pool Nonpaged Bytes: 57020416, Memory Page Faults sec: 4286.437317, Memory Transition Faults sec: 1239.372238, Memory System Cache Resident Bytes: 421888, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 236.5280351, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 286720, Memory System Driver Resident Bytes: 1343488, Memory Standby Cache Normal Priority Bytes: 4857856, Memory Pool Paged Allocs: 61929, Memory Pool Nonpaged Allocs: 53486, Memory pct_ Committed Bytes In Use: 89.71737928, Memory Free System Page Table Entries: 33563833, Memory Available MBytes: 4, Memory Modified Page List Bytes: 196608, Memory Cache Faults sec: 1.466633814, Memory Committed Bytes: 2318766080, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 5365.879804, Memory Pool Paged Resident Bytes: 12095488, Memory Write Copies sec: 0

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 44463, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.012971, src_bytes: 82, dst_bytes: 206, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 138, dst_pkts: 2, dst_ip_bytes: 262, dns_query: adservice.google.com.au, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 6723, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <apache2>, attack: 1

[Assistant] attack


[User] PID: 3294, MINFLT: 2022, MAJFLT: 0, VSTEXT: 148, VSIZE: 17916, RSIZE: 2480, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] attack


[User] PID: 3896, RDDSK: 0, WRDSK: 12, WCANCL: 0, DSK: 0.06, CMD: atop, attack: 0

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:39, current_temperature: 26.04729566, thermostat_status: 1

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 46164, dst_ip: 192.0.76.3, dst_port: 443, proto: tcp, service: -, duration: 104.783963, src_bytes: 905, dst_bytes: 828, conn_state: SF, missed_bytes: 0, src_pkts: 40, src_ip_bytes: 2505, dst_pkts: 20, dst_ip_bytes: 1628, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 14800, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0.02, CMD: atop

[Assistant] attack


[User] PID: 6800, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vsftpd, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 53182, dst_ip: 104.18.100.194, dst_port: 443, proto: tcp, service: ssl, duration: 182.695665, src_bytes: 1594, dst_bytes: 5306, conn_state: SF, missed_bytes: 0, src_pkts: 24, src_ip_bytes: 2574, dst_pkts: 21, dst_ip_bytes: 6158, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 25-Apr-19, time:  08:41:34 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 38139, dst_ip: 192.168.1.49, dst_port: 616, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 1880, dst_ip: 192.168.1.152, dst_port: 51782, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 3896, RDDSK: 0, WRDSK: 8, WCANCL: 0, DSK: 0.12, CMD: atop, attack: 0

[Assistant] normal


[User] PID: 1851, MINFLT: 7, MAJFLT: 0, VSTEXT: 36, VSIZE: 159.8, RSIZE: 2004, VGROW: 0, RGROW: 0, MEM: 0, CMD: vmtoolsd

[Assistant] normal


[User] src_ip: 192.168.1.180, src_port: 53861, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.312703, src_bytes: 37, dst_bytes: 325, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 65, dst_pkts: 1, dst_ip_bytes: 353, dns_query: clients4.google.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.33, src_port: 34621, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 4375, MINFLT: 2080, MAJFLT: 0, VSTEXT: 148, VSIZE: 17952, RSIZE: 2448, VGROW: 0, RGROW: 28, MEM: 0, CMD: atop

[Assistant] normal


[User] date: 25-Apr-19, time:  15:45:49 , fridge_temperature: 6.7, temp_condition: high

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 44236, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 60, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 26-Apr-19, time: 14:41:24, motion_status: 0, light_status:  off

[Assistant] attack


[User] PID: 1457, MINFLT: 0, MAJFLT: 0, VSTEXT: 2219, VSIZE: 359, RSIZE: 88488, VGROW: 0, RGROW: 0, MEM: 0.02, CMD: Xorg

[Assistant] attack


[User] PID: 3031, RDDSK: 0, WRDSK: 4, WCANCL: 0, DSK: 0.07, CMD: atop, attack: 1

[Assistant] attack


[User] PID: 2244, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: ssh-agent, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.1, src_port: 56504, dst_ip: 192.168.1.195, dst_port: 61073, proto: udp, service: -, duration: 5.143211, src_bytes: 5116, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 16, src_ip_bytes: 5564, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 1-Apr-19, time:  20:48:13 , motion_status: 0, light_status:  off

[Assistant] normal


[User] PID: 2830, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: gvfs-udisks2-v

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:53, current_temperature: 26.06900886, thermostat_status: 1

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 46177, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000026, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 62946, dst_ip: 192.168.1.186, dst_port: 2135, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 39869, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.022803, src_bytes: 68, dst_bytes: 440, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 124, dst_pkts: 2, dst_ip_bytes: 496, dns_query: ocsp.sectigo.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 51688, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 71, dst_pkts: 0, dst_ip_bytes: 0, dns_query: links.services.disqus.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 59652, dst_ip: 216.58.199.34, dst_port: 443, proto: tcp, service: ssl, duration: 0.202351, src_bytes: 506, dst_bytes: 2925, conn_state: SF, missed_bytes: 0, src_pkts: 11, src_ip_bytes: 1098, dst_pkts: 12, dst_ip_bytes: 3595, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 6923, MINFLT: 0, MAJFLT: 0, VSTEXT: 0, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: kworker/u256:0

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 43784, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SHR, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 1, dst_ip_bytes: 252, dns_query: detectportal.firefox.com, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 37308, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.239255, src_bytes: 258, dst_bytes: 1919, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 526, dst_pkts: 6, dst_ip_bytes: 2239, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 27-Apr-19, time:  05:06:48 , FC1_Read_Input_Register: 55981, FC2_Read_Discrete_Value: 11043, FC3_Read_Holding_Register: 33323, FC4_Read_Coil: 19938

[Assistant] attack


[User] PID: 3030, RDDSK: 0, WRDSK: 24, WCANCL: 0, DSK: 0.05, CMD: atop, attack: 1

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:41, current_temperature: 27.77903235, thermostat_status: 1

[Assistant] normal


[User] date: 1-Apr-19, time:   21:09:04   , fridge_temperature: 6.05, temp_condition: high

[Assistant] normal


[User] PID: 3678, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] PID: 2894, TRUN: 1, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 4, Status: -, EXC: 0, State: R, CPU: 0.08, CMD: gnome-software

[Assistant] attack


[User] PID: 4470, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0.02, CMD: tcpdump

[Assistant] normal


[User] date: 25-Apr-19, time:  16:04:29 , latitude: 37.97995771, longitude: 48.24901296

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 42014, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000054, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 1488, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: Xorg, attack: 0

[Assistant] normal


[User] date: 28-Apr-19, time:  10:21:16 , current_temperature: 33.09793197, thermostat_status: 1

[Assistant] attack


[User] src_ip: 192.168.1.194, src_port: 80, dst_ip: 192.168.1.194, dst_port: 1190, proto: tcp, service: -, duration: 0.249852, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:54, motion_status: 1, light_status:  on

[Assistant] normal


[User] date: 31-Mar-19, time: 12:42:28, temperature: 28.00039737, pressure: 0.324911351, humidity: 17.54833608

[Assistant] normal


[User] PID: 2882, MINFLT: 0, MAJFLT: 0, VSTEXT: 36, VSIZE: 381.1, RSIZE: 16928, VGROW: 0, RGROW: 0, MEM: 0, CMD: vmtoolsd

[Assistant] attack


[User] date: 28-Apr-19, time:  10:53:48 , FC1_Read_Input_Register: 13345, FC2_Read_Discrete_Value: 50615, FC3_Read_Holding_Register: 26514, FC4_Read_Coil: 37503

[Assistant] attack


[User] date: 31-Mar-19, time: 12:40:33, motion_status: 0, light_status:  off

[Assistant] normal


[User] PID: 6088, TRUN: 0, TSLPI: 0, TSLPU: 0, POLI: -, NICE: 0, PRI: 0, RTPR: 0, CPUNR: 0, Status: NE, EXC: 0, State: E, CPU: 0, CMD: <systemd-udev>

[Assistant] attack


[User] PID: 2222, MINFLT: 132, MAJFLT: 313.2, VSTEXT: 21636, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: gsd-wacom

[Assistant] attack


[User] date: 25-Apr-19, time:  14:53:39 , motion_status: 0, light_status:  off

[Assistant] attack


[User] date: 28-Apr-19, time:  16:14:53 , door_state: closed, sphone_signal: 0

[Assistant] attack