[User] src_ip: 192.168.1.30, src_port: 36786, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: -, duration: 0.000579, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 37908, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000412, src_bytes: 0, dst_bytes: 298, conn_state: SHR, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 2, dst_ip_bytes: 354, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 2-Apr-19, time:  04:03:45 , current_temperature: 34.71596937, thermostat_status: 0

[Assistant] normal


[User] date: 1-Apr-19, time:  20:34:09 , motion_status: 0, light_status:  off

[Assistant] normal


[User] PID: 2847, MINFLT: 0, MAJFLT: 0, VSTEXT: 297, VSIZE: 718.4, RSIZE: 18328, VGROW: 0, RGROW: 0, MEM: 0, CMD: nm-applet

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 36494, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: -, duration: 0.000004, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:13, motion_status: 0, light_status:  off

[Assistant] normal


[User] PID: 4372, TRUN: 1, TSLPI: 0, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: R, CPU: 0, CMD: atop

[Assistant] normal


[User] date: 2-Apr-19, time:  04:06:43 , motion_status: 0, light_status:  off

[Assistant] normal


[User] date: 25-Apr-19, time: 15:28:03, temperature: 43.74969742, pressure: -1.31320476, humidity: 94.4974342

[Assistant] attack


[User] PID: 2378, MINFLT: 132, MAJFLT: 327.8, VSTEXT: 7300, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: gvfsd-trash

[Assistant] attack


[User] PID: 4451, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: 0, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] PID: 4075, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 0

[Assistant] normal


[User] date: 25-Apr-19, time:  10:04:05 , FC1_Read_Input_Register: 8325, FC2_Read_Discrete_Value: 31174, FC3_Read_Holding_Register: 47019, FC4_Read_Coil: 15044

[Assistant] attack


[User] PID: 2978, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vmtoolsd, attack: 0

[Assistant] normal


[User] PID: 2121, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.133, src_port: 5353, dst_ip: 224.0.0.251, dst_port: 5353, proto: udp, service: dns, duration: 13.041775, src_bytes: 468, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 4, src_ip_bytes: 580, dst_pkts: 0, dst_ip_bytes: 0, dns_query: _sleep-proxy._udp.local, dns_qclass: 32769, dns_qtype: 12, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 25-Apr-19, time:  08:21:00 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] PID: 4375, MINFLT: 2072, MAJFLT: 0, VSTEXT: 148, VSIZE: 17952, RSIZE: 2488, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] date: 27-Apr-19, time:  05:16:46 , temperature: 31.21318425, pressure: 1.317713171, humidity: 92.78335397

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 75, dst_ip: 192.168.1.152, dst_port: 75, proto: tcp, service: -, duration: 0.000283, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3896, MINFLT: 1935, MAJFLT: 0, VSTEXT: 148, VSIZE: 17636, RSIZE: 2448, VGROW: 0, RGROW: 8, MEM: 0, CMD: atop

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:00, latitude: 2.377744521, longitude: 12.23650396

[Assistant] normal


[User] date: 2-Apr-19, time:    04:02:27   , fridge_temperature: 5.1, temp_condition: low

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:33, temperature: 21.6585732, pressure: 1.257404937, humidity: 5.675191489

[Assistant] normal


[User] PID: 2533, MINFLT: 8, MAJFLT: 1, VSTEXT: 589, VSIZE: 638.3, RSIZE: 14236, VGROW: 0, RGROW: 0, MEM: 0, CMD: hud-service

[Assistant] normal


[User] PID: 1483, TRUN: 0, TSLPI: 17, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: mysqld

[Assistant] normal


[User] date: 1-Apr-19, time:  20:51:27 , motion_status: 1, light_status:  on

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 78, dst_ip: 176.28.50.165, dst_port: 78, proto: tcp, service: -, duration: 0.000018, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 80, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:28, FC1_Read_Input_Register: 5824, FC2_Read_Discrete_Value: 42470, FC3_Read_Holding_Register: 5940, FC4_Read_Coil: 61240

[Assistant] normal


[User] src_ip: 192.168.1.195, src_port: 1922, dst_ip: 192.168.1.195, dst_port: 1922, proto: tcp, service: -, duration: 0.196818, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 28-Apr-19, time:  20:23:32 , fridge_temperature: 6.2, temp_condition: high

[Assistant] attack


[User] PID: 2886, MINFLT: 0, MAJFLT: 0, VSTEXT: 350, VSIZE: 315.2, RSIZE: 7284, VGROW: 0, RGROW: 0, MEM: 0, CMD: mission-contro

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 32798, dst_ip: 192.168.1.152, dst_port: 80, proto: tcp, service: -, duration: 65.103517, src_bytes: 0, dst_bytes: 0, conn_state: SHR, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 104, dst_pkts: 2, dst_ip_bytes: 112, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:    04:02:04   , fridge_temperature: 3, temp_condition: low

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:24, FC1_Read_Input_Register: 25325, FC2_Read_Discrete_Value: 42877, FC3_Read_Holding_Register: 9914, FC4_Read_Coil: 38995

[Assistant] normal


[User] PID: 2809, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: vmtoolsd

[Assistant] normal


[User] date: 31-Mar-19, time: 12:40:28, motion_status: 0, light_status:  off

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 46174, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.010489, src_bytes: 167, dst_bytes: 2965, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 435, dst_pkts: 7, dst_ip_bytes: 3337, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.195, src_port: 63562, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 54, dst_pkts: 0, dst_ip_bytes: 0, dns_query: wpad.hub, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.33, src_port: 4444, dst_ip: 192.168.1.193, dst_port: 49226, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 264, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 4133, RDDSK: 0, WRDSK: 4, WCANCL: 0, DSK: 0, CMD: atop, attack: 1

[Assistant] attack


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 88.85483924, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 8.685474455, Processor_pct_ C1_Time: 88.85483924, Processor_pct_ Processor_Time: 9.937107224, Processor_C1_ransitions_sec: 252.9951177, Processor_pct_ DPC_Time: 0, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 1.251960282, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 35.5555292, Processor_Interrupts_sec: 599.7366447, Process_Pool_Paged Bytes: 20111624, Process_IO Read_Operations_sec: 0.10015642, Process_Working_Set_ Private: 634773504, Process_Working_Set_Peak: 4285124608, Process_IO_Write Operations_sec: 0.400625681, Process_Page_File Bytes: 1583460352, Process_pct_ User_Time: 17.37094891, Process_Virtual_Bytes Peak: 1.44E+14, Process_Page_File Bytes Peak: 2606010368, Process_IO_Other_Bytes_sec: 10560.09233, Process_Private_Bytes: 1583460352, Process_IO_Write_Bytes_sec: 49.47727162, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.44E+14, Process_pct_ Processor_Time: 200.000655, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 1864080, Process_Working Set: 1104244736, Process_Page Faults_sec: 624.0746548, Process_ID Process: 0, Process_IO Other Operations_sec: 151.0358818, Process_IO Data Operations_sec: 0.500782101, Process_Thread Count: 954, Process_pct_ Privileged_Time: 182.6297061, Process_IO Data Bytes_sec: 6613.328432, Process_IO Read Bytes_sec: 6563.85116, Process_Priority Base: 0, Process_Handle Count: 36583, Network_I(Intel R _82574L_GNC)TCP_APS: 5836, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 5467.338671, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 406.6350664, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5873.973737, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 6.610323739, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 10.41626771, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 17.02659145, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 1, Network_I(Intel R _82574L_GNC) Packets Sent sec: 6.610323739, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 10.41626771, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 201113600, Memory Free & Zero Page List Bytes: 90472448, Memory Cache Bytes Peak: 157425664, Memory System Code Resident Bytes: 0, Memory Available Bytes: 672768000, Memory Commit Limit: 8459431936, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 14.42252452, Memory Demand Zero Faults sec: 299.2673838, Memory Available KBytes: 657000, Memory Pages sec: 47.57429964, Memory Cache Bytes: 32018432, Memory Pool Nonpaged Bytes: 124076032, Memory Page Faults sec: 640.1998385, Memory Transition Faults sec: 294.4598757, Memory System Cache Resident Bytes: 32018432, Memory Long-Term Average Standby Cache Lifetime (s): 28, Memory Standby Cache Reserve Bytes: 230580224, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 165277696, Memory System Driver Resident Bytes: 3911680, Memory Standby Cache Normal Priority Bytes: 186437632, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 38.46746051, Memory Free System Page Table Entries: 4294967295, Memory Available MBytes: 641, Memory Modified Page List Bytes: 21950464, Memory Cache Faults sec: 2.003128406, Memory Committed Bytes: 3254128640, Memory System Driver Total Bytes: 18259968, Memory Pages Input sec: 47.57429964, Memory Pool Paged Resident Bytes: 160927744, Memory Write Copies sec: 1.201877043, LogicalDisk(_Total) Avg  Disk Bytes Write: 6826.666667, LogicalDisk(_Total) pct_ Idle Time: 99.87458663, LogicalDisk(_Total) Disk Reads sec: 13.22064748, LogicalDisk(_Total) pct_ Free Space: 81.04835754, LogicalDisk(_Total) Disk Read Bytes sec: 187223.5983, LogicalDisk(_Total) Avg  Disk sec Read: 0.000361697, LogicalDisk(_Total) Disk Writes sec: 0.300469261, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 165876, LogicalDisk(_Total) Avg  Disk sec Write: 0.000283567, LogicalDisk(_Total) Disk Bytes sec: 189274.8018, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.004781887, LogicalDisk(_Total) pct_ Disk Time: 0.162237026, LogicalDisk(_Total) Avg  Disk Bytes Read: 14161.45455, LogicalDisk(_Total) Avg  Disk Write Queue Length: 8.52E-05, LogicalDisk(_Total) Avg  Disk Queue Length: 0.004867091, LogicalDisk(_Total) pct_ Disk Read Time: 0.159395577, LogicalDisk(_Total) Disk Write Bytes sec: 2051.203488, LogicalDisk(_Total) Disk Transfers sec: 13.52111674, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 13998.45926, LogicalDisk(_Total) pct_ Disk Write Time: 0.002840447, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000359961

[Assistant] normal


[User] date: 23-Apr-19, time:  22:02:18 , temperature: 25.23832064, pressure: -4.072701951, humidity: 3.138565178

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 49454, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 0.021205, src_bytes: 161, dst_bytes: 2009, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 381, dst_pkts: 5, dst_ip_bytes: 2221, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.37, src_port: 45003, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 1500, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:39:35, latitude: 1.153680787, longitude: 11.00408513

[Assistant] normal


[User] date: 28-Apr-19, time:  08:22:25 , fridge_temperature: 4.05, temp_condition: low

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 49340, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: -, duration: 0.000133, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2978, MINFLT: 0, MAJFLT: 0, VSTEXT: 36, VSIZE: 380.9, RSIZE: 16928, VGROW: 0, RGROW: 0, MEM: 0, CMD: vmtoolsd

[Assistant] attack


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 67.3275032, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.078240697, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 25.97591136, Processor_pct_ C1_Time: 67.3275032, Processor_pct_ Processor_Time: 30.99170536, Processor_C1_ransitions_sec: 490.6245593, Processor_pct_ DPC_Time: 0, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 5.007404599, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 36.35368749, Processor_Interrupts_sec: 1829.702122, Process_Pool_Paged Bytes: 22001512, Process_IO Read_Operations_sec: 5.808578166, Process_Working_Set_ Private: 1672478720, Process_Working_Set_Peak: 5785141248, Process_IO_Write Operations_sec: 2.703993284, Process_Page_File Bytes: 3023011840, Process_pct_ User_Time: 51.95182272, Process_Virtual_Bytes Peak: 1.52E+14, Process_Page_File Bytes Peak: 4077498368, Process_IO_Other_Bytes_sec: 3648.788567, Process_Private_Bytes: 3023011840, Process_IO_Write_Bytes_sec: 9608.18947, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.52E+14, Process_pct_ Processor_Time: 199.8267398, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2360904, Process_Working Set: 2045493248, Process_Page Faults_sec: 5735.770643, Process_ID Process: 0, Process_IO Other Operations_sec: 78.91654474, Process_IO Data Operations_sec: 8.512571451, Process_Thread Count: 961, Process_pct_ Privileged_Time: 147.8749171, Process_IO Data Bytes_sec: 10780.92137, Process_IO Read Bytes_sec: 1172.731902, Process_Priority Base: 0, Process_Handle Count: 38360, Network_I(Intel R _82574L_GNC)TCP_APS: 5276, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4956.41969, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 292.3317184, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5248.751409, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 5.20769077, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 9.413902545, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 14.62159332, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 2, Network_I(Intel R _82574L_GNC) Packets Sent sec: 5.20769077, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 9.413902545, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 103886848, Memory Free & Zero Page List Bytes: 4173824, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 522055680, Memory Commit Limit: 8473149440, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 19.72913619, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 1456.651197, Memory Available KBytes: 509820, Memory Pages sec: 19.72913619, Memory Cache Bytes: 2801664, Memory Pool Nonpaged Bytes: 92696576, Memory Page Faults sec: 5740.477595, Memory Transition Faults sec: 4481.918943, Memory System Cache Resident Bytes: 2801664, Memory Long-Term Average Standby Cache Lifetime (s): 2962, Memory Standby Cache Reserve Bytes: 165838848, Memory Page Writes sec: 1.80266219, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 169467904, Memory System Driver Resident Bytes: 741376, Memory Standby Cache Normal Priority Bytes: 182575104, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 45.53334556, Memory Free System Page Table Entries: 12210283, Memory Available MBytes: 497, Memory Modified Page List Bytes: 15245312, Memory Cache Faults sec: 2.503697485, Memory Committed Bytes: 3858108416, Memory System Driver Total Bytes: 18202624, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 37212160, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 38174.72, LogicalDisk(_Total) pct_ Idle Time: 99.97488486, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 81.30731984, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 2.503697485, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 166406, LogicalDisk(_Total) Avg  Disk sec Write: 0.000358996, LogicalDisk(_Total) Disk Bytes sec: 95577.95047, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.029961305, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000898819, LogicalDisk(_Total) Avg  Disk Queue Length: 0.000898819, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 95577.95047, LogicalDisk(_Total) Disk Transfers sec: 2.503697485, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 38174.72, LogicalDisk(_Total) pct_ Disk Write Time: 0.029960303, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000358996

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:26, temperature: 22.83257463, pressure: 1.874163288, humidity: 44.5850966

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:49, latitude: 0.749127173, longitude: 10.5118342

[Assistant] normal


[User] date: 26-Apr-19, time: 19:13:02, door_state: closed, sphone_signal: 0

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 42156, dst_ip: 151.101.24.134, dst_port: 443, proto: tcp, service: ssl, duration: 116.206224, src_bytes: 900, dst_bytes: 4435, conn_state: SF, missed_bytes: 0, src_pkts: 25, src_ip_bytes: 2172, dst_pkts: 21, dst_ip_bytes: 5535, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.79, src_port: 60788, dst_ip: 192.168.1.255, dst_port: 15600, proto: udp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 63, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.195, src_port: 51836, dst_ip: 192.168.1.1, dst_port: 41952, proto: tcp, service: http, duration: 0.691048, src_bytes: 383, dst_bytes: 3882, conn_state: SF, missed_bytes: 0, src_pkts: 11, src_ip_bytes: 847, dst_pkts: 12, dst_ip_bytes: 4374, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 1878, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vmtoolsd, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 56574, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 0.012163, src_bytes: 152, dst_bytes: 518, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 372, dst_pkts: 4, dst_ip_bytes: 690, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:34, FC1_Read_Input_Register: 57624, FC2_Read_Discrete_Value: 64496, FC3_Read_Holding_Register: 36749, FC4_Read_Coil: 17533

[Assistant] normal


[User] date: 25-Apr-19, time: 15:03:48, temperature: 42.68891411, pressure: 2.061327683, humidity: 5.010118708

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:00, temperature: 34.37920668, pressure: 1.125266067, humidity: 36.1752168

[Assistant] normal


[User] PID: 4470, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: tcpdump

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 58690, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 0.208225, src_bytes: 238, dst_bytes: 1951, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 458, dst_pkts: 5, dst_ip_bytes: 2163, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.180, src_port: 38407, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000566, src_bytes: 31, dst_bytes: 106, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 59, dst_pkts: 1, dst_ip_bytes: 134, dns_query: elasticsearch, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 1180, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: kerneloops

[Assistant] attack


[User] PID: 4523, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: unity-panel-se

[Assistant] normal


[User] src_ip: 192.168.1.17, src_port: 53209, dst_ip: 224.0.0.252, dst_port: 5355, proto: udp, service: dns, duration: 0.311122, src_bytes: 66, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 122, dst_pkts: 0, dst_ip_bytes: 0, dns_query: desktop-p3kklkq, dns_qclass: 1, dns_qtype: 255, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 4032, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: kworker/u256:0

[Assistant] normal


[User] date: 2-Apr-19, time:  04:06:37 , motion_status: 0, light_status:  off

[Assistant] normal


[User] date: 25-Apr-19, time: 9:01:42, current_temperature: 26.40505722, thermostat_status: 1

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49819, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.000133, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 1-Apr-19, time:   15:01:33   , fridge_temperature: 6.4, temp_condition: high

[Assistant] normal


[User] date: 1-Apr-19, time:  19:45:27 , motion_status: 0, light_status:  off

[Assistant] normal


[User] PID: 1480, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: mysqld, attack: 0

[Assistant] normal


[User] PID: 1482, TRUN: 0, TSLPI: 7, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: named

[Assistant] normal


[User] PID: 2774, MINFLT: 14, MAJFLT: 0, VSTEXT: 10, VSIZE: 1.4, RSIZE: 19560, VGROW: 48, RGROW: 0, MEM: 0.01, CMD: compiz

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 34296, dst_ip: 192.168.1.152, dst_port: 10502, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 26-Apr-19, time:  14:59:48 , latitude: 41.94263462, longitude: 52.54938867

[Assistant] attack


[User] src_ip: 192.168.1.33, src_port: 4444, dst_ip: 192.168.1.193, dst_port: 49241, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 688, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:07, motion_status: 1, light_status:  on

[Assistant] normal


[User] PID: 2118, RDDSK: 0, WRDSK: 8, WCANCL: 0, DSK: 0.05, CMD: apache2, attack: 0

[Assistant] normal


[User] PID: 2907, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: udissd, attack: 1

[Assistant] attack


[User] date: 26-Apr-19, time: 16:12:03, fridge_temperature: 6.05, temp_condition: high

[Assistant] attack


[User] PID: 2533, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: hud-service

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 57429, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.022294, src_bytes: 66, dst_bytes: 290, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 122, dst_pkts: 2, dst_ip_bytes: 346, dns_query: cdn.taboola.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 34020, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: -, duration: 0.014909, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 54190, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.00229, src_bytes: 170, dst_bytes: 2938, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 438, dst_pkts: 7, dst_ip_bytes: 3310, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1007, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: upstart-file-b, attack: 0

[Assistant] normal


[User] date: 26-Apr-19, time:  14:47:53 , latitude: 36.38623338, longitude: 46.10793434

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:45, FC1_Read_Input_Register: 46384, FC2_Read_Discrete_Value: 28178, FC3_Read_Holding_Register: 50976, FC4_Read_Coil: 57856

[Assistant] normal


[User] PID: 2477, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: gsd-color, attack: 1

[Assistant] attack


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 32.70031264, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.234739407, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 33.48948875, Processor_pct_ C1_Time: 32.70031264, Processor_pct_ Processor_Time: 65.33681422, Processor_C1_ransitions_sec: 3878.277686, Processor_pct_ DPC_Time: 0.312985876, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 31.8463129, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 2537.094634, Processor_Interrupts_sec: 8485.015203, Process_Pool_Paged Bytes: 22527896, Process_IO Read_Operations_sec: 2.202599817, Process_Working_Set_ Private: 2159210496, Process_Working_Set_Peak: 6343217152, Process_IO_Write Operations_sec: 1.301536255, Process_Page_File Bytes: 4128980992, Process_pct_ User_Time: 66.97897749, Process_Virtual_Bytes Peak: 1.55E+14, Process_Page_File Bytes Peak: 5178281984, Process_IO_Other_Bytes_sec: 4241.906892, Process_Private_Bytes: 4128980992, Process_IO_Write_Bytes_sec: 6717.929441, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.55E+14, Process_pct_ Processor_Time: 198.9025243, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2729424, Process_Working Set: 2213998592, Process_Page Faults_sec: 12846.16284, Process_ID Process: 0, Process_IO Other Operations_sec: 55.06499542, Process_IO Data Operations_sec: 3.504136072, Process_Thread Count: 1073, Process_pct_ Privileged_Time: 131.9235468, Process_IO Data Bytes_sec: 6964.220148, Process_IO Read Bytes_sec: 246.2907068, Process_Priority Base: 0, Process_Handle Count: 40381, Network_I(Intel R _82574L_GNC)TCP_APS: 5569, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4914.6009, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 237.8807802, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5152.48168, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 4.405199633, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 7.809217532, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 12.21441717, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 1, Network_I(Intel R _82574L_GNC) Packets Sent sec: 4.405199633, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 7.809217532, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 139014144, Memory Free & Zero Page List Bytes: 2113536, Memory Cache Bytes Peak: 157425664, Memory System Code Resident Bytes: 0, Memory Available Bytes: 207269888, Memory Commit Limit: 8459431936, Memory Transition Pages RePurposed sec: 6497.268986, Memory Pages Output sec: 402.4750574, Memory Page Reads sec: 2491.040274, Memory Demand Zero Faults sec: 3644.802106, Memory Available KBytes: 202412, Memory Pages sec: 6687.393398, Memory Cache Bytes: 1048576, Memory Pool Nonpaged Bytes: 121376768, Memory Page Faults sec: 13350.95867, Memory Transition Faults sec: 3064.817527, Memory System Cache Resident Bytes: 1048576, Memory Long-Term Average Standby Cache Lifetime (s): 50, Memory Standby Cache Reserve Bytes: 52637696, Memory Page Writes sec: 22.12611634, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 134610944, Memory System Driver Resident Bytes: 1.76E+13, Memory Standby Cache Normal Priority Bytes: 17903616, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 59.77685467, Memory Free System Page Table Entries: 12212961, Memory Available MBytes: 197, Memory Modified Page List Bytes: 24682496, Memory Cache Faults sec: 0.100118173, Memory Committed Bytes: 5056782336, Memory System Driver Total Bytes: 18264064, Memory Pages Input sec: 6284.918341, Memory Pool Paged Resident Bytes: 18866176, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 73256.77876, LogicalDisk(_Total) pct_ Idle Time: 81.31260487, LogicalDisk(_Total) Disk Reads sec: 2489.438384, LogicalDisk(_Total) pct_ Free Space: 81.0214841, LogicalDisk(_Total) Disk Read Bytes sec: 25744768.38, LogicalDisk(_Total) Avg  Disk sec Read: 0.000234353, LogicalDisk(_Total) Disk Writes sec: 22.62670721, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.200236347, LogicalDisk(_Total) Free Megabytes: 165821, LogicalDisk(_Total) Avg  Disk sec Write: 0.000310554, LogicalDisk(_Total) Disk Bytes sec: 27402328.06, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.583625134, LogicalDisk(_Total) pct_ Disk Time: 19.68848521, LogicalDisk(_Total) Avg  Disk Bytes Read: 10341.59694, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.007029422, LogicalDisk(_Total) Avg  Disk Queue Length: 0.590654556, LogicalDisk(_Total) pct_ Disk Read Time: 19.45417146, LogicalDisk(_Total) Disk Write Bytes sec: 1657559.684, LogicalDisk(_Total) Disk Transfers sec: 2512.065091, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 10908.28743, LogicalDisk(_Total) pct_ Disk Write Time: 0.234314748, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.00023504

[Assistant] normal


[User] src_ip: 192.168.1.184, src_port: 8080, dst_ip: 192.168.1.184, dst_port: 1677, proto: tcp, service: -, duration: 0.22652, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.33, src_port: 34921, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 1500, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 44151, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000476, src_bytes: 0, dst_bytes: 298, conn_state: SHR, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 2, dst_ip_bytes: 354, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 10655, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] date: 28-Apr-19, time: 16:09:05, motion_status: 1, light_status:  on

[Assistant] attack


[User] src_ip: 192.168.1.133, src_port: 5353, dst_ip: 224.0.0.251, dst_port: 5353, proto: udp, service: dns, duration: 2.977906, src_bytes: 180, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 236, dst_pkts: 0, dst_ip_bytes: 0, dns_query: _sleep-proxy._udp.local, dns_qclass: 1, dns_qtype: 12, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.190, src_port: 1669, dst_ip: 192.168.1.190, dst_port: 1669, proto: tcp, service: -, duration: 0.178107, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.33, src_port: 45935, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 1, dst_ip_bytes: 91, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 12, dst_ip: 192.168.1.190, dst_port: 12, proto: tcp, service: -, duration: 0.004452, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 80, dst_pkts: 2, dst_ip_bytes: 80, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.195, src_port: 51532, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 80, dst_pkts: 0, dst_ip_bytes: 0, dns_query: cp601-prod.do.dsp.mp.microsoft.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 59079, dst_ip: 192.168.1.103, dst_port: 1301, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 10621, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] PID: 2579, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: upstart-dbus-b, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 55136, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.001947, src_bytes: 167, dst_bytes: 2813, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 435, dst_pkts: 6, dst_ip_bytes: 3133, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 25-Apr-19, time:  08:40:06 , fridge_temperature: 6.05, temp_condition: high

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 62947, dst_ip: 192.168.1.186, dst_port: 10566, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 59306, dst_ip: 192.168.1.194, dst_port: 80, proto: tcp, service: -, duration: 294.723812, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 7, src_ip_bytes: 372, dst_pkts: 6, dst_ip_bytes: 360, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  05:06:25 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] PID: 3282, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 1, Status: 0, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] attack


[User] PID: 3031, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: atop, attack: 1

[Assistant] attack


[User] PID: 2849, TRUN: 0, TSLPI: 5, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: 0, EXC: 0, State: S, CPU: 1.33, CMD: nautilus

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 57920, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 0.300812, src_bytes: 238, dst_bytes: 1951, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 458, dst_pkts: 5, dst_ip_bytes: 2163, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:42, temperature: 30.76491412, pressure: 2.118799552, humidity: 11.69456583

[Assistant] normal


[User] PID: 1442, MINFLT: 36, MAJFLT: 0, VSTEXT: 2219, VSIZE: 758, RSIZE: 267.1, VGROW: 0, RGROW: 0, MEM: 0.07, CMD: Xorg

[Assistant] normal


[User] Processor(_Total) DPC Rate: 0, Processor(_Total) pct_ Idle Time: 95.10416667, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.052083333, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 4.6875, Processor(_Total) pct_ C1 Time: 93.33333333, Processor(_Total) pct_ Processor Time: 4.895833333, Processor(_Total) C1 Transitions sec: 282.7323268, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 0.208333333, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 15.06661303, Processor(_Total) Interrupts sec: 207.1992624, Process(_Total) Pool Paged Bytes: 10215448, Process(_Total) IO Read Operations sec: 8.99996796, Process(_Total) Working Set - Private: 1584955392, Process(_Total) Working Set Peak: 2646454272, Process(_Total) IO Write Operations sec: 5.933312211, Process(_Total) Page File Bytes: 2128883712, Process(_Total) pct_ User Time: 9.270833333, Process(_Total) Virtual Bytes Peak: 9375940608, Process(_Total) Page File Bytes Peak: 2408804352, Process(_Total) IO Other Bytes sec: 4427.317572, Process(_Total) Private Bytes: 2128883712, Process(_Total) IO Write Bytes sec: 11597.02538, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 8179499008, Process(_Total) pct_ Processor Time: 199.7916667, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1360472, Process(_Total) Working Set: 1915420672, Process(_Total) Page Faults sec: 694.5308608, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 232.7325048, Process(_Total) IO Data Operations sec: 14.93328017, Process(_Total) Thread Count: 637, Process(_Total) pct_ Privileged Time: 190.5208333, Process(_Total) IO Data Bytes sec: 20741.65949, Process(_Total) IO Read Bytes sec: 9144.634112, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 16579, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 2907.722982, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 420.1318377, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 3327.85482, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 6.733309363, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 9.066634389, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 15.79994375, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 6.733309363, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 9.066634389, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 109699072, Memory Free & Zero Page List Bytes: 45039616, Memory Cache Bytes Peak: 139370496, Memory System Code Resident Bytes: 49152, Memory Available Bytes: 777900032, Memory Commit Limit: 6070345728, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 1.99999288, Memory Demand Zero Faults sec: 735.397382, Memory Available KBytes: 759668, Memory Pages sec: 1.99999288, Memory Cache Bytes: 28254208, Memory Pool Nonpaged Bytes: 71208960, Memory Page Faults sec: 839.2636789, Memory Transition Faults sec: 99.46631257, Memory System Cache Resident Bytes: 28254208, Memory Standby Cache Reserve Bytes: 388558848, Memory Page Writes sec: 0, Memory System Code Total Bytes: 4370432, Memory Standby Cache Core Bytes: 97439744, Memory System Driver Resident Bytes: 3756032, Memory Standby Cache Normal Priority Bytes: 246861824, Memory Pool Paged Allocs: 85844, Memory Pool Nonpaged Allocs: 83013, Memory pct_ Committed Bytes In Use: 46.50490075, Memory Free System Page Table Entries: 33556544, Memory Available MBytes: 741, Memory Modified Page List Bytes: 7835648, Memory Cache Faults sec: 4.933315771, Memory Committed Bytes: 2823008256, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 1.99999288, Memory Pool Paged Resident Bytes: 52961280, Memory Write Copies sec: 7.733305803

[Assistant] attack


[User] date: 31-Mar-19, time:    12:43:48   , door_state: open, sphone_signal: true

[Assistant] normal


[User] PID: 2797, MINFLT: 8, MAJFLT: 0, VSTEXT: 1350, VSIZE: 1.4, RSIZE: 25000, VGROW: 0, RGROW: 0, MEM: 0.01, CMD: nautilus

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:17, latitude: 1.369884049, longitude: 11.40931034

[Assistant] normal


[User] src_ip: 192.168.1.180, src_port: 43860, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.005968, src_bytes: 41, dst_bytes: 89, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 69, dst_pkts: 1, dst_ip_bytes: 117, dns_query: elasticsearch.mydns.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 35778, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 0.020812, src_bytes: 248, dst_bytes: 1486, conn_state: SF, missed_bytes: 0, src_pkts: 10, src_ip_bytes: 668, dst_pkts: 8, dst_ip_bytes: 1818, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 34939, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.002953, src_bytes: 84, dst_bytes: 436, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 140, dst_pkts: 2, dst_ip_bytes: 492, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3257, TRUN: 0, TSLPI: 22, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0.12, CMD: Web-Content

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 49024, dst_ip: 192.168.1.103, dst_port: 2710, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 25-Apr-19, time:  09:56:50 , FC1_Read_Input_Register: 47984, FC2_Read_Discrete_Value: 49463, FC3_Read_Holding_Register: 33360, FC4_Read_Coil: 60726

[Assistant] attack


[User] PID: 3790, MINFLT: 0, MAJFLT: 0, VSTEXT: 2132, VSIZE: 2.4, RSIZE: 21896, VGROW: 0, RGROW: 0, MEM: 0.01, CMD: ostinato

[Assistant] normal


[User] date: 1-Apr-19, time:  15:11:27 , latitude: 8.248404165, longitude: 17.25919265

[Assistant] normal


[User] PID: 2596, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: unity-settings, attack: 0

[Assistant] normal


[User] src_ip: fe80::76:ad3e:1329:a7fd, src_port: 5353, dst_ip: ff02::fb, dst_port: 5353, proto: udp, service: dns, duration: 2.991365, src_bytes: 180, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 276, dst_pkts: 0, dst_ip_bytes: 0, dns_query: _sleep-proxy._udp.local, dns_qclass: 1, dns_qtype: 12, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] Processor(_Total) DPC Rate: 74, Processor(_Total) pct_ Idle Time: 68.02083333, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 2.916666667, Processor(_Total) pct_ C1 Time: 66.66666667, Processor(_Total) pct_ Processor Time: 31.97916667, Processor(_Total) C1 Transitions sec: 3528.372745, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 29.0625, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 3662.299983, Processor(_Total) Interrupts sec: 4953.174565, Process(_Total) Pool Paged Bytes: 7924208, Process(_Total) IO Read Operations sec: 9.332908562, Process(_Total) Working Set - Private: 700186624, Process(_Total) Working Set Peak: 2021535744, Process(_Total) IO Write Operations sec: 0.799963591, Process(_Total) Page File Bytes: 1854136320, Process(_Total) pct_ User Time: 2.916666667, Process(_Total) Virtual Bytes Peak: 7972560896, Process(_Total) Page File Bytes Peak: 2247249920, Process(_Total) IO Other Bytes sec: 9050.988059, Process(_Total) Private Bytes: 1854136320, Process(_Total) IO Write Bytes sec: 790.6306824, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6786969600, Process(_Total) pct_ Processor Time: 100, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1026632, Process(_Total) Working Set: 755154944, Process(_Total) Page Faults sec: 4701.919333, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 402.8483317, Process(_Total) IO Data Operations sec: 10.13287215, Process(_Total) Thread Count: 544, Process(_Total) pct_ Privileged Time: 97.08333333, Process(_Total) IO Data Bytes sec: 1052.952077, Process(_Total) IO Read Bytes sec: 262.3213942, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13863, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 380.116033, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 186.7248349, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 566.8408678, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 1.999908977, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 3.533172527, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 5.533081504, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 1.999908977, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 3.533172527, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 98459648, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 80883712, Memory System Code Resident Bytes: 729088, Memory Available Bytes: 64466944, Memory Commit Limit: 2517131264, Memory Transition Pages RePurposed sec: 5902.931338, Memory Pages Output sec: 7325.666584, Memory Page Reads sec: 2635.146732, Memory Demand Zero Faults sec: 1145.214544, Memory Available KBytes: 62956, Memory Pages sec: 14757.12835, Memory Cache Bytes: 434176, Memory Pool Nonpaged Bytes: 56999936, Memory Page Faults sec: 5008.905361, Memory Transition Faults sec: 1228.944067, Memory System Cache Resident Bytes: 434176, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 1095.683465, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 35655680, Memory System Driver Resident Bytes: 1638400, Memory Standby Cache Normal Priority Bytes: 28811264, Memory Pool Paged Allocs: 64279, Memory Pool Nonpaged Allocs: 54759, Memory pct_ Committed Bytes In Use: 88.25890838, Memory Free System Page Table Entries: 33563833, Memory Available MBytes: 61, Memory Modified Page List Bytes: 32768, Memory Cache Faults sec: 0.866627224, Memory Committed Bytes: 2221592576, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 7431.461769, Memory Pool Paged Resident Bytes: 10821632, Memory Write Copies sec: 0

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 40116, dst_ip: 52.28.231.150, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 1500, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 37417, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.005421, src_bytes: 168, dst_bytes: 436, conn_state: SF, missed_bytes: 0, src_pkts: 4, src_ip_bytes: 280, dst_pkts: 2, dst_ip_bytes: 492, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 58462, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 0.19977, src_bytes: 238, dst_bytes: 1951, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 458, dst_pkts: 5, dst_ip_bytes: 2163, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  04:59:54 , current_temperature: 32.14931045, thermostat_status: 1

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 47010, dst_ip: 192.168.1.184, dst_port: 21, proto: tcp, service: -, duration: 0.000017, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 60, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 26-Apr-19, time: 19:11:21, door_state: closed, sphone_signal: 0

[Assistant] attack


[User] src_ip: fe80::f554:8774:9968:b60b, src_port: 58970, dst_ip: ff02::1:3, dst_port: 5355, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 81, dst_pkts: 0, dst_ip_bytes: 0, dns_query: desktop-uciie91, dns_qclass: 1, dns_qtype: 255, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time:    12:42:10   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 53400, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 0.011116, src_bytes: 155, dst_bytes: 978, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 375, dst_pkts: 4, dst_ip_bytes: 1150, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2847, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: 0, EXC: 0, State: S, CPU: 0.01, CMD: nm-applet

[Assistant] attack


[User] PID: 2906, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0.86, CMD: compiz

[Assistant] attack


[User] PID: 8324, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <vsftpd>, attack: 0

[Assistant] normal


[User] PID: 3504, MINFLT: 0, MAJFLT: 0, VSTEXT: 0, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: kworker/1:0

[Assistant] attack


[User] PID: 2325, TRUN: 0, TSLPI: 6, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: gnome-keyring-

[Assistant] normal


[User] PID: 2433, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: dbus-daemon, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 56566, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.026139, src_bytes: 84, dst_bytes: 327, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 140, dst_pkts: 2, dst_ip_bytes: 383, dns_query: sb.scorecardresearch.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:    04:05:36   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] PID: 1404, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: whoopsie, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 1384, dst_ip: 192.168.1.152, dst_port: 1384, proto: tcp, service: -, duration: 0.25665, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 1-Apr-19, time:  20:46:48 , current_temperature: 26.45272253, thermostat_status: 1

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 11, dst_ip: 192.168.1.169, dst_port: 0, proto: icmp, service: -, duration: 0.000005, src_bytes: 104, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 160, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  09:43:09 , latitude: 60.61287482, longitude: 71.22363642

[Assistant] attack


[User] src_ip: 192.168.1.36, src_port: 38100, dst_ip: 192.168.1.152, dst_port: 80, proto: tcp, service: http, duration: 5.183476, src_bytes: 2065, dst_bytes: 1124, conn_state: S3, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 2385, dst_pkts: 4, dst_ip_bytes: 1340, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 79.40780694, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 18.20162682, Processor_pct_ C1_Time: 79.40780694, Processor_pct_ Processor_Time: 19.53787284, Processor_C1_ransitions_sec: 145.0879722, Processor_pct_ DPC_Time: 0.07811857, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 1.328015691, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 24.2979857, Processor_Interrupts_sec: 492.5591668, Process_Pool_Paged Bytes: 24551696, Process_IO Read_Operations_sec: 0, Process_Working_Set_ Private: 1551200256, Process_Working_Set_Peak: 5203488768, Process_IO_Write Operations_sec: 1.899842503, Process_Page_File Bytes: 2644127744, Process_pct_ User_Time: 36.40325365, Process_Virtual_Bytes Peak: 1.57E+14, Process_Page_File Bytes Peak: 3646427136, Process_IO_Other_Bytes_sec: 5792.819775, Process_Private_Bytes: 2644127744, Process_IO_Write_Bytes_sec: 9486.213593, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.57E+14, Process_pct_ Processor_Time: 199.8273022, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2442736, Process_Working Set: 2280587264, Process_Page Faults_sec: 459.661894, Process_ID Process: 0, Process_IO Other Operations_sec: 77.79355091, Process_IO Data Operations_sec: 1.899842503, Process_Thread Count: 1077, Process_pct_ Privileged_Time: 163.4240486, Process_IO Data Bytes_sec: 9486.213593, Process_IO Read Bytes_sec: 0, Process_Priority Base: 0, Process_Handle Count: 39886, Network_I(Intel R _82574L_GNC)TCP_APS: 6455, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4808.901342, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 234.1805864, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5043.081929, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 4.29964356, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 6.699444616, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 10.99908818, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 3, Network_I(Intel R _82574L_GNC) Packets Sent sec: 4.29964356, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 6.699444616, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 109522944, Memory Free & Zero Page List Bytes: 13352960, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 503439360, Memory Commit Limit: 4662874112, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0.099991711, Memory Demand Zero Faults sec: 549.1544751, Memory Available KBytes: 491640, Memory Pages sec: 0.199983421, Memory Cache Bytes: 31719424, Memory Pool Nonpaged Bytes: 85786624, Memory Page Faults sec: 460.4618277, Memory Transition Faults sec: 14.79877318, Memory System Cache Resident Bytes: 31719424, Memory Long-Term Average Standby Cache Lifetime (s): 726, Memory Standby Cache Reserve Bytes: 17874944, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 158793728, Memory System Driver Resident Bytes: 2695168, Memory Standby Cache Normal Priority Bytes: 313417728, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 76.95443679, Memory Free System Page Table Entries: 12208958, Memory Available MBytes: 480, Memory Modified Page List Bytes: 9383936, Memory Cache Faults sec: 0.699941975, Memory Committed Bytes: 3588288512, Memory System Driver Total Bytes: 18178048, Memory Pages Input sec: 0.199983421, Memory Pool Paged Resident Bytes: 74076160, Memory Write Copies sec: 0.299975132, LogicalDisk(_Total) Avg  Disk Bytes Write: 15438.76923, LogicalDisk(_Total) pct_ Idle Time: 99.97622096, LogicalDisk(_Total) Disk Reads sec: 0.199983421, LogicalDisk(_Total) pct_ Free Space: 83.17087114, LogicalDisk(_Total) Disk Read Bytes sec: 2406.200526, LogicalDisk(_Total) Avg  Disk sec Read: 0.0012046, LogicalDisk(_Total) Disk Writes sec: 1.299892239, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.099991711, LogicalDisk(_Total) Free Megabytes: 170220, LogicalDisk(_Total) Avg  Disk sec Write: 0.000365046, LogicalDisk(_Total) Disk Bytes sec: 22474.93683, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.0002409, LogicalDisk(_Total) pct_ Disk Time: 0.023847037, LogicalDisk(_Total) Avg  Disk Bytes Read: 12032, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000474521, LogicalDisk(_Total) Avg  Disk Queue Length: 0.000715421, LogicalDisk(_Total) pct_ Disk Read Time: 0.008029339, LogicalDisk(_Total) Disk Write Bytes sec: 20068.7363, LogicalDisk(_Total) Disk Transfers sec: 1.49987566, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 14984.53333, LogicalDisk(_Total) pct_ Disk Write Time: 0.015817698, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000476987

[Assistant] normal


[User] Processor_DPC_Rate: 1, Processor_pct_ Idle_Time: 76.9550668, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 20.70249813, Processor_pct_ C1_Time: 76.9550668, Processor_pct_ Processor_Time: 22.50234663, Processor_C1_ransitions_sec: 242.7923982, Processor_pct_ DPC_Time: 0.312490538, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 1.796820592, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 89.99718219, Processor_Interrupts_sec: 826.57412, Process_Pool_Paged Bytes: 25009528, Process_IO Read_Operations_sec:  , Process_Working_Set_ Private: 1513988096, Process_Working_Set_Peak: 5186981888, Process_IO_Write Operations_sec:  , Process_Page_File Bytes: 2619342848, Process_pct_ User_Time:  , Process_Virtual_Bytes Peak: 1.63E+14, Process_Page_File Bytes Peak: 3611955200, Process_IO_Other_Bytes_sec:  , Process_Private_Bytes: 2619342848, Process_IO_Write_Bytes_sec:  , Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.63E+14, Process_pct_ Processor_Time:  , Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2534528, Process_Working Set: 2267803648, Process_Page Faults_sec:  , Process_ID Process: 0, Process_IO Other Operations_sec:  , Process_IO Data Operations_sec:  , Process_Thread Count: 1187, Process_pct_ Privileged_Time: 73.27903111, Process_IO Data Bytes_sec:  , Process_IO Read Bytes_sec:  , Process_Priority Base: 0, Process_Handle Count: 41175, Network_I(Intel R _82574L_GNC)TCP_APS: 6540, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4841.548411, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 211.593375, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5053.141786, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 3.799881026, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 6.299802753, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 10.09968378, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 4, Network_I(Intel R _82574L_GNC) Packets Sent sec: 3.799881026, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 6.299802753, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 109731840, Memory Free & Zero Page List Bytes: 8531968, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 520732672, Memory Commit Limit: 4662874112, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 3.699884157, Memory Demand Zero Faults sec: 595.5813523, Memory Available KBytes: 508528, Memory Pages sec: 25.49920162, Memory Cache Bytes: 41689088, Memory Pool Nonpaged Bytes: 85184512, Memory Page Faults sec: 564.3823292, Memory Transition Faults sec: 30.49904507, Memory System Cache Resident Bytes: 41689088, Memory Long-Term Average Standby Cache Lifetime (s): 603, Memory Standby Cache Reserve Bytes: 62726144, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 158928896, Memory System Driver Resident Bytes: 2138112, Memory Standby Cache Normal Priority Bytes: 290545664, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 76.53691989, Memory Free System Page Table Entries: 12208920, Memory Available MBytes: 496, Memory Modified Page List Bytes: 9334784, Memory Cache Faults sec: 27.69913274, Memory Committed Bytes: 3568820224, Memory System Driver Total Bytes: 18178048, Memory Pages Input sec: 25.49920162, Memory Pool Paged Resident Bytes: 74125312, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 13755.26848, LogicalDisk(_Total) pct_ Idle Time: 99.44258688, LogicalDisk(_Total) Disk Reads sec: 15.89950219, LogicalDisk(_Total) pct_ Free Space: 83.59400576, LogicalDisk(_Total) Disk Read Bytes sec: 346510.7507, LogicalDisk(_Total) Avg  Disk sec Read: 0.000451777, LogicalDisk(_Total) Disk Writes sec: 51.39839072, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.599981215, LogicalDisk(_Total) Free Megabytes: 171086, LogicalDisk(_Total) Avg  Disk sec Write: 0.000190373, LogicalDisk(_Total) Disk Bytes sec: 1053509.415, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.007183042, LogicalDisk(_Total) pct_ Disk Time: 0.565596874, LogicalDisk(_Total) Avg  Disk Bytes Read: 21793.81132, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.009784864, LogicalDisk(_Total) Avg  Disk Queue Length: 0.016967906, LogicalDisk(_Total) pct_ Disk Read Time: 0.23943475, LogicalDisk(_Total) Disk Write Bytes sec: 706998.6639, LogicalDisk(_Total) Disk Transfers sec: 67.2978929, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 15654.41902, LogicalDisk(_Total) pct_ Disk Write Time: 0.326162124, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000252131

[Assistant] normal


[User] src_ip: 192.168.1.180, src_port: 40199, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000415, src_bytes: 41, dst_bytes: 89, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 69, dst_pkts: 1, dst_ip_bytes: 117, dns_query: elasticsearch.mydns.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 4188, TRUN: 1, TSLPI: 12, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: 0, EXC: 0, State: S, CPU: 0.01, CMD: drone

[Assistant] attack


[User] PID: 3826, RDDSK: 0, WRDSK: 4, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] PID: 3155, MINFLT: 3, MAJFLT: 0, VSTEXT: 280, VSIZE: 711.5, RSIZE: 17688, VGROW: 0, RGROW: 0, MEM: 0, CMD: gnome-terminal

[Assistant] normal


[User] PID: 6943, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: 0, EXC: 0, State: S, CPU: 0.01, CMD: apache2

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 54410, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000043, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 4375, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: atop

[Assistant] normal


[User] PID: 2887, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: evolution-cale, attack: 0

[Assistant] normal


[User] date: 31-Mar-19, time: 12:38:35, motion_status: 0, light_status:  off

[Assistant] normal


[User] date: 2-Apr-19, time:  04:06:34 , motion_status: 0, light_status:  off

[Assistant] normal


[User] PID: 3818, TRUN: 0, TSLPI: 0, TSLPU: 0, POLI: 0, NICE: 0, PRI: 0, RTPR: 0, CPUNR: 0, Status: NE, EXC: 0, State: E, CPU: 0, CMD: <apache2>

[Assistant] attack


[User] PID: 3023, TRUN: 0, TSLPI: 2, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: 0, EXC: 0, State: S, CPU: 0, CMD: zeitgeist-daem

[Assistant] attack


[User] date: 31-Mar-19, time:    12:44:49   , fridge_temperature: 13.4, temp_condition: high

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 59262, dst_ip: 157.240.8.18, dst_port: 443, proto: tcp, service: -, duration: 66.760702, src_bytes: 629, dst_bytes: 629, conn_state: RSTR, missed_bytes: 0, src_pkts: 29, src_ip_bytes: 2137, dst_pkts: 16, dst_ip_bytes: 1449, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack