[User] Processor(_Total) DPC Rate: 38, Processor(_Total) pct_ Idle Time: 76.35416667, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 0.833333333, Processor(_Total) pct_ C1 Time: 73.33333333, Processor(_Total) pct_ Processor Time: 23.64583333, Processor(_Total) C1 Transitions sec: 3433.825662, Processor(_Total) pct_ DPC Time: 0.520833333, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 22.8125, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 3244.757582, Processor(_Total) Interrupts sec: 4560.967419, Process(_Total) Pool Paged Bytes: 8105520, Process(_Total) IO Read Operations sec: 128.0009566, Process(_Total) Working Set - Private: 788004864, Process(_Total) Working Set Peak: 2013917184, Process(_Total) IO Write Operations sec: 128.2009581, Process(_Total) Page File Bytes: 2262278144, Process(_Total) pct_ User Time: 0.833333333, Process(_Total) Virtual Bytes Peak: 8106516480, Process(_Total) Page File Bytes Peak: 2625224704, Process(_Total) IO Other Bytes sec: 5835.110274, Process(_Total) Private Bytes: 2262278144, Process(_Total) IO Write Bytes sec: 27720.80717, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 7058866176, Process(_Total) pct_ Processor Time: 99.47916667, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1231432, Process(_Total) Working Set: 841580544, Process(_Total) Page Faults sec: 3880.295665, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 250.7352072, Process(_Total) IO Data Operations sec: 256.2019147, Process(_Total) Thread Count: 560, Process(_Total) pct_ Privileged Time: 98.64583333, Process(_Total) IO Data Bytes sec: 54839.00983, Process(_Total) IO Read Bytes sec: 27118.20266, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13747, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 352.0026306, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 79.60059488, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 431.6032255, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 1.133341803, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 2.733353761, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 3.866695564, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 1.133341803, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 2.733353761, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 90992640, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 716800, Memory Available Bytes: 21168128, Memory Commit Limit: 2918703104, Memory Transition Pages RePurposed sec: 4241.231696, Memory Pages Output sec: 3895.162443, Memory Page Reads sec: 2394.151226, Memory Demand Zero Faults sec: 387.2695609, Memory Available KBytes: 20672, Memory Pages sec: 8759.665464, Memory Cache Bytes: 421888, Memory Pool Nonpaged Bytes: 52666368, Memory Page Faults sec: 4010.096635, Memory Transition Faults sec: 1231.542537, Memory System Cache Resident Bytes: 421888, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 921.806889, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 196608, Memory System Driver Resident Bytes: 1499136, Memory Standby Cache Normal Priority Bytes: 20971520, Memory Pool Paged Allocs: 59019, Memory Pool Nonpaged Allocs: 52071, Memory pct_ Committed Bytes In Use: 89.63026998, Memory Free System Page Table Entries: 33562140, Memory Available MBytes: 20, Memory Modified Page List Bytes: 73728, Memory Cache Faults sec: 2.066682112, Memory Committed Bytes: 2616041472, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 4864.503021, Memory Pool Paged Resident Bytes: 10956800, Memory Write Copies sec: 0

[Assistant] normal


[User] date: 28-Apr-19, time:  04:23:04 , current_temperature: 25, thermostat_status: 0

[Assistant] attack


[User] date: 31-Mar-19, time: 12:39:54, motion_status: 1, light_status:  on

[Assistant] normal


[User] src_ip: 192.168.1.33, src_port: 4444, dst_ip: 192.168.1.193, dst_port: 49207, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 632, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:40:28, temperature: 22.68019931, pressure: 0.95737274, humidity: 87.56024745

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 40650, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000042, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time:    12:40:47   , fridge_temperature: 6.1, temp_condition: high

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:51, current_temperature: 31.32430311, thermostat_status: 1

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:21, FC1_Read_Input_Register: 35338, FC2_Read_Discrete_Value: 34098, FC3_Read_Holding_Register: 34491, FC4_Read_Coil: 5126

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 41430, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.036937, src_bytes: 84, dst_bytes: 327, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 140, dst_pkts: 2, dst_ip_bytes: 383, dns_query: sb.scorecardresearch.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.180, src_port: 41269, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.012767, src_bytes: 31, dst_bytes: 106, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 59, dst_pkts: 1, dst_ip_bytes: 134, dns_query: elasticsearch, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 2872, RDDSK: 3332, WRDSK: 20, WCANCL: 0, DSK: 0.98, CMD: node-red, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.33, src_port: 40733, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 1205, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.180, src_port: 58347, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000469, src_bytes: 41, dst_bytes: 89, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 69, dst_pkts: 1, dst_ip_bytes: 117, dns_query: elasticsearch.mydns.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 39676, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.001578, src_bytes: 35, dst_bytes: 67, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 63, dst_pkts: 1, dst_ip_bytes: 95, dns_query: broker.hivemq.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 59687, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.021943, src_bytes: 74, dst_bytes: 304, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 130, dst_pkts: 2, dst_ip_bytes: 360, dns_query: referrer.disqus.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:    04:05:50   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] PID: 6892, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: worer/u256:1, attack: 0

[Assistant] normal


[User] PID: 6988, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <vsftpd>, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 60307, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.073063, src_bytes: 52, dst_bytes: 52, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 108, dst_pkts: 2, dst_ip_bytes: 108, dns_query: wpad.hub, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: T, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 44794, dst_ip: 52.28.231.150, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:  00:20:49 , current_temperature: 32.48633499, thermostat_status: 0

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 1880, dst_ip: 192.168.1.152, dst_port: 51782, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:40:35, motion_status: 1, light_status:  on

[Assistant] normal


[User] date: 25-Apr-19, time: 8:17:39, temperature: 45.12830448, pressure: 1.678983612, humidity: 45.85650423

[Assistant] attack


[User] PID: 3676, MINFLT: 2077, MAJFLT: 0, VSTEXT: 148, VSIZE: 18020, RSIZE: 2580, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] PID: 4429, MINFLT: 37, MAJFLT: 0, VSTEXT: 596, VSIZE: 184.4, RSIZE: 6332, VGROW: 0, RGROW: 16, MEM: 0, CMD: apache2

[Assistant] attack


[User] date: 2-Apr-19, time:  04:06:22 , current_temperature: 29.46356078, thermostat_status: 1

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 54242, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.015931, src_bytes: 84, dst_bytes: 424, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 140, dst_pkts: 2, dst_ip_bytes: 480, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 62947, dst_ip: 192.168.1.186, dst_port: 513, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.133, src_port: 5353, dst_ip: 224.0.0.251, dst_port: 5353, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 77, dst_pkts: 0, dst_ip_bytes: 0, dns_query: _raop._tcp.local, dns_qclass: 1, dns_qtype: 12, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.195, src_port: 63571, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 54, dst_pkts: 0, dst_ip_bytes: 0, dns_query: wpad.hub, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: bad_UDP_checksum, weird_addl: -, weird_notice: F

[Assistant] normal


[User] PID: 4374, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] PID: 1583, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vmtoolsd, attack: 1

[Assistant] attack


[User] date: 28-Apr-19, time:  17:26:51 , current_temperature: 26.10365522, thermostat_status: 1

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 62949, dst_ip: 192.168.1.250, dst_port: 4279, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:38:54, motion_status: 0, light_status:  off

[Assistant] normal


[User] date: 31-Mar-19, time:    12:43:36   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] PID: 1473, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: irqbalance, attack: 1

[Assistant] attack


[User] date: 28-Apr-19, time:  04:53:10 , latitude: 23.68295892, longitude: 36.44012057

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:26, FC1_Read_Input_Register: 45977, FC2_Read_Discrete_Value: 58624, FC3_Read_Holding_Register: 6899, FC4_Read_Coil: 59048

[Assistant] normal


[User] PID: 1542, TRUN: 4, TSLPI: 13, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: 0, EXC: 0, State: S, CPU: 0.01, CMD: mysqld

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 1880, dst_ip: 192.168.1.152, dst_port: 51782, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 2797, TRUN: 0, TSLPI: 5, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: nautilus

[Assistant] normal


[User] Processor_DPC_Rate: 1, Processor_pct_ Idle_Time: 99.07092437, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 0.156010483, Processor_pct_ C1_Time: 99.07092437, Processor_pct_ Processor_Time: 0.153290659, Processor_C1_ransitions_sec: 152.3652358, Processor_pct_ DPC_Time: 0, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 0, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 78.17954106, Processor_Interrupts_sec: 183.1178522, Process_Pool_Paged Bytes: 12527768, Process_IO Read_Operations_sec: 0.199692314, Process_Working_Set_ Private: 453812224, Process_Working_Set_Peak: 3323994112, Process_IO_Write Operations_sec: 0.099846157, Process_Page_File Bytes: 932270080, Process_pct_ User_Time: 0.312020967, Process_Virtual_Bytes Peak: 9.68E+13, Process_Page_File Bytes Peak: 2721980416, Process_IO_Other_Bytes_sec: 3476.243808, Process_Private_Bytes: 932270080, Process_IO_Write_Bytes_sec: 6.789538687, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 9.68E+13, Process_pct_ Processor_Time: 200.0054396, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 1388624, Process_Working Set: 1365295104, Process_Page Faults_sec: 11.68200039, Process_ID Process: 0, Process_IO Other Operations_sec: 125.1072349, Process_IO Data Operations_sec: 0.299538471, Process_Thread Count: 762, Process_pct_ Privileged_Time: 199.6934187, Process_IO Data Bytes_sec: 8.586769516, Process_IO Read Bytes_sec: 1.797230829, Process_Priority Base: 0, Process_Handle Count: 25869, Network_I(Intel R _82574L_GNC)TCP_APS: 0, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 183.2176984, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 0, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 183.2176984, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 0, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 2.0967693, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 2.0967693, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 0, Network_I(Intel R _82574L_GNC) Packets Sent sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 2.0967693, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 165806080, Memory Free & Zero Page List Bytes: 37003264, Memory Cache Bytes Peak: 297566208, Memory System Code Resident Bytes: 3178496, Memory Available Bytes: 840101888, Memory Commit Limit: 3354243072, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 9.585231088, Memory Available KBytes: 820412, Memory Pages sec: 0, Memory Cache Bytes: 24502272, Memory Pool Nonpaged Bytes: 57901056, Memory Page Faults sec: 19.5698468, Memory Transition Faults sec: 9.285692616, Memory System Cache Resident Bytes: 0, Memory Long-Term Average Standby Cache Lifetime (s): 1020, Memory Standby Cache Reserve Bytes: 212336640, Memory Page Writes sec: 0, Memory System Code Total Bytes: 3825664, Memory Standby Cache Core Bytes: 91717632, Memory System Driver Resident Bytes: 7016448, Memory Standby Cache Normal Priority Bytes: 499044352, Memory Pool Paged Allocs: 149276, Memory Pool Nonpaged Allocs: 102988, Memory pct_ Committed Bytes In Use: 43.95663974, Memory Free System Page Table Entries: 12240447, Memory Available MBytes: 801, Memory Modified Page List Bytes: 30466048, Memory Cache Faults sec: 0, Memory Committed Bytes: 1474412544, Memory System Driver Total Bytes: 17145856, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 101007360, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 8216.380952, LogicalDisk(_Total) pct_ Idle Time: 99.93310969, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 94.55712113, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 2.0967693, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.499230786, LogicalDisk(_Total) Free Megabytes: 193340, LogicalDisk(_Total) Avg  Disk sec Write: 0.000354617, LogicalDisk(_Total) Disk Bytes sec: 17227.85534, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.074354846, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000743548, LogicalDisk(_Total) Avg  Disk Queue Length: 0.000743548, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 17227.85534, LogicalDisk(_Total) Disk Transfers sec: 2.0967693, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 8216.380952, LogicalDisk(_Total) pct_ Disk Write Time: 0.074354846, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000354617

[Assistant] normal


[User] src_ip: 192.168.1.250, src_port: 5353, dst_ip: 224.0.0.251, dst_port: 5353, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 89, dst_pkts: 0, dst_ip_bytes: 0, dns_query: _233637de._sub._googlecast._tcp.local, dns_qclass: 1, dns_qtype: 12, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 2608, MINFLT: 9, MAJFLT: 0, VSTEXT: 589, VSIZE: 793.7, RSIZE: 184.2, VGROW: 128, RGROW: 128, MEM: 0.05, CMD: hud-service

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 59578, dst_ip: 13.32.126.41, dst_port: 443, proto: tcp, service: ssl, duration: 5.710949, src_bytes: 674, dst_bytes: 3710, conn_state: SF, missed_bytes: 2004, src_pkts: 11, src_ip_bytes: 1254, dst_pkts: 7, dst_ip_bytes: 2090, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: TLSv12, ssl_cipher: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, ssl_resumed: F, ssl_established: F, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 4350, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: 0, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:47, temperature: 45.76327115, pressure: 0.264309673, humidity: 20.8747236

[Assistant] normal


[User] src_ip: 172.17.0.5, src_port: 48750, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000489, src_bytes: 0, dst_bytes: 178, conn_state: SHR, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 2, dst_ip_bytes: 234, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 3876, RDDSK: 0, WRDSK: 8, WCANCL: 0, DSK: 0.01, CMD: apache2, attack: 1

[Assistant] attack


[User] PID: 3678, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] date: 31-Mar-19, time: 12:42:00, motion_status: 0, light_status:  off

[Assistant] normal


[User] PID: 6616, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vsftpd, attack: 0

[Assistant] normal


[User] Processor_DPC_Rate: 5, Processor_pct_ Idle_Time: 30.39675603, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.23401923, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 62.5611408, Processor_pct_ C1_Time: 30.39675603, Processor_pct_ Processor_Time: 67.00328858, Processor_C1_ransitions_sec: 297.7411836, Processor_pct_ DPC_Time: 0.07800641, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 4.446365369, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 231.0439634, Processor_Interrupts_sec: 1108.591671, Process_Pool_Paged Bytes: 14942400, Process_IO Read_Operations_sec: 65.49906655, Process_Working_Set_ Private: 1180995584, Process_Working_Set_Peak: 5639348224, Process_IO_Write Operations_sec: 135.291517, Process_Page_File Bytes: 2314321920, Process_pct_ User_Time: 125.1222816, Process_Virtual_Bytes Peak: 1.12E+14, Process_Page_File Bytes Peak: 9236348928, Process_IO_Other_Bytes_sec: 122674.1603, Process_Private_Bytes: 2314321920, Process_IO_Write_Bytes_sec: 234239.3394, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.12E+14, Process_pct_ Processor_Time: 199.3843839, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 1974128, Process_Working Set: 1353912320, Process_Page Faults_sec: 649.8985124, Process_ID Process: 0, Process_IO Other Operations_sec: 1344.428249, Process_IO Data Operations_sec: 200.7905836, Process_Thread Count: 798, Process_pct_ Privileged_Time: 74.2621023, Process_IO Data Bytes_sec: 830096.2294, Process_IO Read Bytes_sec: 595856.8901, Process_Priority Base: 0, Process_Handle Count: 29896, Network_I(Intel R _82574L_GNC)TCP_APS: 0, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 2920.100153, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 218.6630423, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 3138.763195, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 4.093691659, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 6.290306696, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 10.38399835, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 0, Network_I(Intel R _82574L_GNC) Packets Sent sec: 4.093691659, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 6.290306696, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 270008320, Memory Free & Zero Page List Bytes: 2416640, Memory Cache Bytes Peak: 815652864, Memory System Code Resident Bytes: 1777664, Memory Available Bytes: 201433088, Memory Commit Limit: 6444666880, Memory Transition Pages RePurposed sec: 309.9224124, Memory Pages Output sec: 0, Memory Page Reads sec: 39.53907066, Memory Demand Zero Faults sec: 1039.997374, Memory Available KBytes: 196712, Memory Pages sec: 135.7907477, Memory Cache Bytes: 35983360, Memory Pool Nonpaged Bytes: 88276992, Memory Page Faults sec: 1063.660908, Memory Transition Faults sec: 39.43922452, Memory System Cache Resident Bytes: 0, Memory Long-Term Average Standby Cache Lifetime (s): 40, Memory Standby Cache Reserve Bytes: 53248, Memory Page Writes sec: 0, Memory System Code Total Bytes: 3825664, Memory Standby Cache Core Bytes: 148537344, Memory System Driver Resident Bytes: 3350528, Memory Standby Cache Normal Priority Bytes: 50425856, Memory Pool Paged Allocs: 159812, Memory Pool Nonpaged Allocs: 116351, Memory pct_ Committed Bytes In Use: 50.01013725, Memory Free System Page Table Entries: 12229013, Memory Available MBytes: 192, Memory Modified Page List Bytes: 192512, Memory Cache Faults sec: 187.9104318, Memory Committed Bytes: 3222986752, Memory System Driver Total Bytes: 17158144, Memory Pages Input sec: 135.7907477, Memory Pool Paged Resident Bytes: 116936704, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 17909.29617, LogicalDisk(_Total) pct_ Idle Time: 94.74272842, LogicalDisk(_Total) Disk Reads sec: 34.04753307, LogicalDisk(_Total) pct_ Free Space: 82.32299273, LogicalDisk(_Total) Disk Read Bytes sec: 484322.4636, LogicalDisk(_Total) Avg  Disk sec Read: 0.000444401, LogicalDisk(_Total) Disk Writes sec: 28.65584161, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.99846138, LogicalDisk(_Total) Free Megabytes: 168325, LogicalDisk(_Total) Avg  Disk sec Write: 0.001346817, LogicalDisk(_Total) Disk Bytes sec: 997528.418, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.015131097, LogicalDisk(_Total) pct_ Disk Time: 5.37260724, LogicalDisk(_Total) Avg  Disk Bytes Read: 14224.8915, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.038594976, LogicalDisk(_Total) Avg  Disk Queue Length: 0.053726072, LogicalDisk(_Total) pct_ Disk Read Time: 1.51310968, LogicalDisk(_Total) Disk Write Bytes sec: 513205.9544, LogicalDisk(_Total) Disk Transfers sec: 62.70337468, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 15908.6879, LogicalDisk(_Total) pct_ Disk Write Time: 3.85949756, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000856812

[Assistant] normal


[User] PID: 6123, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 5, Status: -, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:59, FC1_Read_Input_Register: 43206, FC2_Read_Discrete_Value: 35327, FC3_Read_Holding_Register: 22608, FC4_Read_Coil: 2787

[Assistant] normal


[User] PID: 2615, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: update-notifie, attack: 1

[Assistant] attack


[User] PID: 7930, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <systemd-udev>, attack: 0

[Assistant] normal


[User] date: 31-Mar-19, time:    12:44:50   , fridge_temperature: 5.45, temp_condition: low

[Assistant] normal


[User] date: 28-Apr-19, time:  12:25:38 , temperature: 31.90716851, pressure: 0.774468676, humidity: 45.27814491

[Assistant] attack


[User] src_ip: 192.168.1.133, src_port: 5353, dst_ip: 224.0.0.251, dst_port: 5353, proto: udp, service: dns, duration: 0.945722, src_bytes: 122, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 178, dst_pkts: 0, dst_ip_bytes: 0, dns_query: _233637de._sub._googlecast._tcp.local, dns_qclass: 1, dns_qtype: 12, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 39449, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000036, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 26-Apr-19, time: 11:59:38, motion_status: 1, light_status:  on

[Assistant] attack


[User] PID: 3790, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: ostinato

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 80, dst_ip: 192.168.1.193, dst_port: 1949, proto: tcp, service: -, duration: 0.267704, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:40, latitude: 1.348046445, longitude: 11.0946101

[Assistant] normal


[User] PID: 3058, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: 0, EXC: 0, State: S, CPU: 0, CMD: gnome-terminal

[Assistant] attack


[User] Processor_DPC_Rate: 1, Processor_pct_ Idle_Time: 75.12655897, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 20.3590904, Processor_pct_ C1_Time: 75.12655897, Processor_pct_ Processor_Time: 23.1658849, Processor_C1_ransitions_sec: 216.6647243, Processor_pct_ DPC_Time: 0, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 2.8081504, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 35.94437823, Processor_Interrupts_sec: 543.6587207, Process_Pool_Paged Bytes: 26695864, Process_IO Read_Operations_sec: 1.996909902, Process_Working_Set_ Private: 1205743616, Process_Working_Set_Peak: 5470035968, Process_IO_Write Operations_sec: 1.797218912, Process_Page_File Bytes: 2828402688, Process_pct_ User_Time: 40.7181808, Process_Virtual_Bytes Peak: 1.68E+14, Process_Page_File Bytes Peak: 3976749056, Process_IO_Other_Bytes_sec: 5975.453344, Process_Private_Bytes: 2828402688, Process_IO_Write_Bytes_sec: 14110.36506, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.68E+14, Process_pct_ Processor_Time: 200.0027118, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 3085112, Process_Working Set: 2148884480, Process_Page Faults_sec: 549.4497595, Process_ID Process: 0, Process_IO Other Operations_sec: 61.40497948, Process_IO Data Operations_sec: 3.794128813, Process_Thread Count: 1136, Process_pct_ Privileged_Time: 159.284531, Process_IO Data Bytes_sec: 14330.42453, Process_IO Read Bytes_sec: 220.0594712, Process_Priority Base: 0, Process_Handle Count: 48077, Network_I(Intel R _82574L_GNC)TCP_APS: 9500, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 7555.308613, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 561.7307554, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 8117.039369, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 10.28408599, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 15.77558822, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 26.05967422, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 15, Network_I(Intel R _82574L_GNC) Packets Sent sec: 10.28408599, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 15.77558822, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 109613056, Memory Free & Zero Page List Bytes: 111489024, Memory Cache Bytes Peak: 77492224, Memory System Code Resident Bytes: 2510848, Memory Available Bytes: 240734208, Memory Commit Limit: 4088385536, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0.19969099, Memory Demand Zero Faults sec: 615.6473227, Memory Available KBytes: 235092, Memory Pages sec: 0.299536485, Memory Cache Bytes: 17690624, Memory Pool Nonpaged Bytes: 90124288, Memory Page Faults sec: 561.2315279, Memory Transition Faults sec: 10.98300446, Memory System Cache Resident Bytes: 17690624, Memory Long-Term Average Standby Cache Lifetime (s): 62, Memory Standby Cache Reserve Bytes: 117161984, Memory Page Writes sec: 0, Memory System Code Total Bytes: 4419584, Memory Standby Cache Core Bytes: 6041600, Memory System Driver Resident Bytes: 2416640, Memory Standby Cache Normal Priority Bytes: 6041600, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 82.32313871, Memory Free System Page Table Entries: 12280638, Memory Available MBytes: 229, Memory Modified Page List Bytes: 2666496, Memory Cache Faults sec: 6.390111686, Memory Committed Bytes: 3365687296, Memory System Driver Total Bytes: 17965056, Memory Pages Input sec: 0.299536485, Memory Pool Paged Resident Bytes: 77979648, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 14976, LogicalDisk(_Total) pct_ Idle Time: 99.96463977, LogicalDisk(_Total) Disk Reads sec: 0.19969099, LogicalDisk(_Total) pct_ Free Space: 83.72397551, LogicalDisk(_Total) Disk Read Bytes sec: 1226.901444, LogicalDisk(_Total) Avg  Disk sec Read: 0.00152795, LogicalDisk(_Total) Disk Writes sec: 1.597527921, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.39938198, LogicalDisk(_Total) Free Megabytes: 171352, LogicalDisk(_Total) Avg  Disk sec Write: 0.0005906, LogicalDisk(_Total) Disk Bytes sec: 25151.47959, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.000305117, LogicalDisk(_Total) pct_ Disk Time: 0.041620533, LogicalDisk(_Total) Avg  Disk Bytes Read: 6144, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000943499, LogicalDisk(_Total) Avg  Disk Queue Length: 0.001248616, LogicalDisk(_Total) pct_ Disk Read Time: 0.010170247, LogicalDisk(_Total) Disk Write Bytes sec: 23924.57815, LogicalDisk(_Total) Disk Transfers sec: 1.797218912, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 13994.66667, LogicalDisk(_Total) pct_ Disk Write Time: 0.031450286, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.00069475

[Assistant] normal


[User] PID: 3294, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 1, Status: 0, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] attack


[User] date: 28-Apr-19, time: 3:57:25, temperature: 46.70350211, pressure: 1.55065559, humidity: 5.440470812

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 38376, dst_ip: 52.139.250.253, dst_port: 443, proto: tcp, service: ssl, duration: 0.618584, src_bytes: 269, dst_bytes: 3642, conn_state: SF, missed_bytes: 0, src_pkts: 10, src_ip_bytes: 689, dst_pkts: 7, dst_ip_bytes: 3934, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 6497, MINFLT: 0, MAJFLT: 0, VSTEXT: 193, VSIZE: 2.1, RSIZE: 202.5, VGROW: 0, RGROW: 0, MEM: 0.06, CMD: firefox

[Assistant] attack


[User] date: 26-Apr-19, time:  15:09:43 , FC1_Read_Input_Register: 63041, FC2_Read_Discrete_Value: 63121, FC3_Read_Holding_Register: 36234, FC4_Read_Coil: 32293

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 45674, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000033, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 2938, MINFLT: 8, MAJFLT: 0, VSTEXT: 1350, VSIZE: 1.4, RSIZE: 46872, VGROW: 0, RGROW: 0, MEM: 0.01, CMD: nautilus

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:28, FC1_Read_Input_Register: 10288, FC2_Read_Discrete_Value: 17954, FC3_Read_Holding_Register: 31442, FC4_Read_Coil: 22464

[Assistant] normal


[User] date: 25-Apr-19, time: 9:00:42, temperature: 22.78183136, pressure: -1.903762736, humidity: 31.45860229

[Assistant] attack


[User] Processor(_Total) DPC Rate: 42, Processor(_Total) pct_ Idle Time: 76.04166667, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.3125, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 0.833333333, Processor(_Total) pct_ C1 Time: 80, Processor(_Total) pct_ Processor Time: 23.95833333, Processor(_Total) C1 Transitions sec: 2952.818083, Processor(_Total) pct_ DPC Time: 0.104166667, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 23.125, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 2797.620636, Processor(_Total) Interrupts sec: 4000.734175, Process(_Total) Pool Paged Bytes: 8387144, Process(_Total) IO Read Operations sec: 2.133298233, Process(_Total) Working Set - Private: 790265856, Process(_Total) Working Set Peak: 2035400704, Process(_Total) IO Write Operations sec: 1.666639245, Process(_Total) Page File Bytes: 2070233088, Process(_Total) pct_ User Time: 0.833333333, Process(_Total) Virtual Bytes Peak: 8342990848, Process(_Total) Page File Bytes Peak: 2684125184, Process(_Total) IO Other Bytes sec: 2260.762803, Process(_Total) Private Bytes: 2070233088, Process(_Total) IO Write Bytes sec: 5723.839157, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 7045120000, Process(_Total) pct_ Processor Time: 99.58333333, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1212752, Process(_Total) Working Set: 847167488, Process(_Total) Page Faults sec: 4705.189251, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 107.9982231, Process(_Total) IO Data Operations sec: 3.799937478, Process(_Total) Thread Count: 582, Process(_Total) pct_ Privileged Time: 98.75, Process(_Total) IO Data Bytes sec: 5963.301884, Process(_Total) IO Read Bytes sec: 239.4627267, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 14576, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 101.8649906, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 74.93210045, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 176.7970911, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 1.066649117, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 1.399976966, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 2.466626082, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 1.066649117, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 1.399976966, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 92913664, Memory Free & Zero Page List Bytes: 7290880, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 897024, Memory Available Bytes: 12066816, Memory Commit Limit: 2918703104, Memory Transition Pages RePurposed sec: 5103.449365, Memory Pages Output sec: 4188.864413, Memory Page Reads sec: 2418.026882, Memory Demand Zero Faults sec: 821.8531444, Memory Available KBytes: 11784, Memory Pages sec: 10100.83381, Memory Cache Bytes: 1396736, Memory Pool Nonpaged Bytes: 52785152, Memory Page Faults sec: 4884.786296, Memory Transition Faults sec: 1647.372895, Memory System Cache Resident Bytes: 1396736, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 416.9264735, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 372736, Memory System Driver Resident Bytes: 2170880, Memory Standby Cache Normal Priority Bytes: 4403200, Memory Pool Paged Allocs: 59557, Memory Pool Nonpaged Allocs: 52913, Memory pct_ Committed Bytes In Use: 83.29071788, Memory Free System Page Table Entries: 33562140, Memory Available MBytes: 11, Memory Modified Page List Bytes: 28672, Memory Cache Faults sec: 0.733321268, Memory Committed Bytes: 2431008768, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 5911.969395, Memory Pool Paged Resident Bytes: 13025280, Memory Write Copies sec: 0

[Assistant] normal


[User] date: 26-Apr-19, time: 15:57:44, motion_status: 0, light_status:  off

[Assistant] attack


[User] Processor(_Total) DPC Rate: 0, Processor(_Total) pct_ Idle Time: 88.07291667, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 10.57291667, Processor(_Total) pct_ C1 Time: 83.33333333, Processor(_Total) pct_ Processor Time: 11.92708333, Processor(_Total) C1 Transitions sec: 435.7294728, Processor(_Total) pct_ DPC Time: 0.052083333, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 1.354166667, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 92.46584742, Processor(_Total) Interrupts sec: 584.9281509, Process(_Total) Pool Paged Bytes: 10213096, Process(_Total) IO Read Operations sec: 12.59988836, Process(_Total) Working Set - Private: 2466025472, Process(_Total) Working Set Peak: 3673464832, Process(_Total) IO Write Operations sec: 976.6580135, Process(_Total) Page File Bytes: 3321716736, Process(_Total) pct_ User Time: 21.14583333, Process(_Total) Virtual Bytes Peak: 10624503808, Process(_Total) Page File Bytes Peak: 3650859008, Process(_Total) IO Other Bytes sec: 9440.98302, Process(_Total) Private Bytes: 3321716736, Process(_Total) IO Write Bytes sec: 706406.4746, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 9377460224, Process(_Total) pct_ Processor Time: 199.8958333, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1488720, Process(_Total) Working Set: 2592849920, Process(_Total) Page Faults sec: 3634.3678, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 529.9953042, Process(_Total) IO Data Operations sec: 989.2579018, Process(_Total) Thread Count: 627, Process(_Total) pct_ Privileged Time: 178.75, Process(_Total) IO Data Bytes sec: 2099261.934, Process(_Total) IO Read Bytes sec: 1392855.459, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 16564, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 92827.44422, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 2885.30777, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 95712.75199, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 27.53308939, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 74.26600867, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 101.7990981, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 27.53308939, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 74.26600867, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 99938304, Memory Free & Zero Page List Bytes: 96784384, Memory Cache Bytes Peak: 139370496, Memory System Code Resident Bytes: 28672, Memory Available Bytes: 184938496, Memory Commit Limit: 6070345728, Memory Transition Pages RePurposed sec: 289.7974324, Memory Pages Output sec: 0, Memory Page Reads sec: 55.26617701, Memory Demand Zero Faults sec: 3522.502124, Memory Available KBytes: 180604, Memory Pages sec: 325.1304527, Memory Cache Bytes: 3731456, Memory Pool Nonpaged Bytes: 70529024, Memory Page Faults sec: 4158.763153, Memory Transition Faults sec: 270.9309329, Memory System Cache Resident Bytes: 3731456, Memory Standby Cache Reserve Bytes: 2076672, Memory Page Writes sec: 0, Memory System Code Total Bytes: 4370432, Memory Standby Cache Core Bytes: 60723200, Memory System Driver Resident Bytes: 2138112, Memory Standby Cache Normal Priority Bytes: 25354240, Memory Pool Paged Allocs: 63503, Memory Pool Nonpaged Allocs: 65645, Memory pct_ Committed Bytes In Use: 62.41105034, Memory Free System Page Table Entries: 33556542, Memory Available MBytes: 176, Memory Modified Page List Bytes: 6631424, Memory Cache Faults sec: 330.5970709, Memory Committed Bytes: 3788566528, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 325.1304527, Memory Pool Paged Resident Bytes: 26816512, Memory Write Copies sec: 7.733264817

[Assistant] attack


[User] date: 2-Apr-19, time:    04:05:51   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] PID: 2762, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 4, Status: -, EXC: 0, State: S, CPU: 0, CMD: gnome-terminal

[Assistant] attack


[User] date: 26-Apr-19, time:  15:44:09 , latitude: 66.66535767, longitude: 75.50562039

[Assistant] attack


[User] PID: 2537, MINFLT: 0, MAJFLT: 0, VSTEXT: 223, VSIZE: 642.3, RSIZE: 4484, VGROW: 0, RGROW: 0, MEM: 0, CMD: gnome-session

[Assistant] normal


[User] date: 25-Apr-19, time:  16:53:59 , fridge_temperature: 11.25, temp_condition: high

[Assistant] attack


[User] PID: 2547, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: unity-panel-se

[Assistant] normal


[User] PID: 2906, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: compiz, attack: 0

[Assistant] normal


[User] PID: 4372, MINFLT: 2072, MAJFLT: 0, VSTEXT: 148, VSIZE: 17644, RSIZE: 2440, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] date: 25-Apr-19, time: 9:41:29, latitude: 72.19972541, longitude: 80.15276669

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 49023, dst_ip: 192.168.1.46, dst_port: 9103, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 1-Apr-19, time:   20:40:29   , fridge_temperature: 11.85, temp_condition: high

[Assistant] normal


[User] date: 26-Apr-19, time:  14:31:42 , current_temperature: 31.01504864, thermostat_status: 1

[Assistant] attack


[User] PID: 2533, MINFLT: 0, MAJFLT: 0, VSTEXT: 589, VSIZE: 636, RSIZE: 16304, VGROW: 0, RGROW: 0, MEM: 0, CMD: hud-service

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:54, temperature: 22.48876771, pressure: 0.871671056, humidity: 62.73631605

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 47944, dst_ip: 216.58.196.142, dst_port: 443, proto: tcp, service: ssl, duration: 3.002722, src_bytes: 1569, dst_bytes: 9274, conn_state: SF, missed_bytes: 0, src_pkts: 25, src_ip_bytes: 2889, dst_pkts: 23, dst_ip_bytes: 11778, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 48295, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000039, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.33, src_port: 35241, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 1, dst_ip_bytes: 52, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:    04:05:28   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] PID: 2396, MINFLT: 132, MAJFLT: 157.7, VSTEXT: 5384, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: dconf-service

[Assistant] attack


[User] src_ip: 2405:6e00:10ce:2c00:20c:29ff:feee:e07a, src_port: 49336, dst_ip: 2001:7fd::1, dst_port: 53, proto: udp, service: dns, duration: 0.07001, src_bytes: 28, dst_bytes: 1097, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 76, dst_pkts: 1, dst_ip_bytes: 1145, dns_query: (empty), dns_qclass: 1, dns_qtype: 2, dns_rcode: 0, dns_AA: T, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: DNS_RR_unknown_type, weird_addl: 46, weird_notice: F

[Assistant] normal


[User] PID: 2750, MINFLT: 0, MAJFLT: 0, VSTEXT: 0, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: worer/3:2

[Assistant] normal


[User] src_ip: fe80::76:ad3e:1329:a7fd, src_port: 5353, dst_ip: ff02::fb, dst_port: 5353, proto: udp, service: dns, duration: 4.004538, src_bytes: 342, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 582, dst_pkts: 0, dst_ip_bytes: 0, dns_query: _sleep-proxy._udp.local, dns_qclass: 32769, dns_qtype: 12, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 3766, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: worer/3:1-cg, attack: 1

[Assistant] attack


[User] PID: 3678, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: atop

[Assistant] normal


[User] PID: 2600, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: hud-service, attack: 1

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:15, latitude: 0.678656843, longitude: 10.94645908

[Assistant] normal


[User] date: 2-Apr-19, time:  00:08:56 , current_temperature: 26.07150699, thermostat_status: 1

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:04, latitude: 0.890872608, longitude: 10.91059876

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 53876, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.014807, src_bytes: 84, dst_bytes: 424, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 140, dst_pkts: 2, dst_ip_bytes: 480, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 4375, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: atop

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:55, FC1_Read_Input_Register: 48130, FC2_Read_Discrete_Value: 12479, FC3_Read_Holding_Register: 33334, FC4_Read_Coil: 34060

[Assistant] normal


[User] PID: 4075, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 0

[Assistant] normal


[User] date: 28-Apr-19, time: 15:54:20, motion_status: 1, light_status:  on

[Assistant] attack


[User] date: 28-Apr-19, time:  18:48:26 , current_temperature: 30.20018572, thermostat_status: 1

[Assistant] attack


[User] src_ip: 192.168.1.37, src_port: 38215, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 1, dst_ip_bytes: 52, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:42:01, motion_status: 0, light_status:  off

[Assistant] normal


[User] date: 31-Mar-19, time: 12:38:32, motion_status: 0, light_status:  off

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 41441, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000077, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 33083, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.022723, src_bytes: 76, dst_bytes: 198, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 132, dst_pkts: 2, dst_ip_bytes: 254, dns_query: cm.g.doubleclick.net, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:49, current_temperature: 27.43119279, thermostat_status: 1

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 33, dst_ip: 192.168.1.194, dst_port: 33, proto: tcp, service: -, duration: 0.000014, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:  04:06:27 , current_temperature: 28.28219981, thermostat_status: 1

[Assistant] normal


[User] date: 28-Apr-19, time:  12:33:38 , temperature: 31.38824659, pressure: -5.843794305, humidity: 20.42985417

[Assistant] attack


[User] PID: 2498, MINFLT: 0, MAJFLT: 0, VSTEXT: 121, VSIZE: 22412, RSIZE: 380, VGROW: 0, RGROW: 0, MEM: 0, CMD: upstart-dbus-b

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 53929, dst_ip: 192.168.1.133, dst_port: 6779, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 25-Apr-19, time:  10:07:32 , FC1_Read_Input_Register: 33903, FC2_Read_Discrete_Value: 35479, FC3_Read_Holding_Register: 29404, FC4_Read_Coil: 55189

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 30, dst_ip: 192.168.1.184, dst_port: 30, proto: tcp, service: -, duration: 0.000019, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1442, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: Xorg

[Assistant] normal


[User] date: 1-Apr-19, time:  20:17:58 , current_temperature: 29.82427408, thermostat_status: 0

[Assistant] normal


[User] PID: 5786, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <apache2>, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 62946, dst_ip: 192.168.1.250, dst_port: 32782, proto: tcp, service: -, duration: 0.595039, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2906, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: compiz, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 17, dst_ip: 192.168.1.194, dst_port: 17, proto: tcp, service: -, duration: 0.000002, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 36816, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.013629, src_bytes: 88, dst_bytes: 132, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 144, dst_pkts: 2, dst_ip_bytes: 188, dns_query: encrypted-tbn0.gstatic.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 5737, RDDSK: 0, WRDSK: 48, WCANCL: 0, DSK: 0.01, CMD: apache2, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 61171, dst_ip: 192.168.1.186, dst_port: 9, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 1-Apr-19, time:  18:16:47 , latitude: 105.5606714, longitude: 117.8684433

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:50, latitude: 2.766944687, longitude: 12.44441597

[Assistant] normal


[User] date: 28-Apr-19, time:  08:20:17 , fridge_temperature: 12.4, temp_condition: high

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 39970, dst_ip: 192.168.1.152, dst_port: 80, proto: tcp, service: http, duration: 0.004359, src_bytes: 147, dst_bytes: 3440, conn_state: SF, missed_bytes: 0, src_pkts: 7, src_ip_bytes: 519, dst_pkts: 7, dst_ip_bytes: 3812, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 4075, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 0

[Assistant] normal


[User] PID: 2031, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: Xorg, attack: 1

[Assistant] attack


[User] PID: 1725, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: 0, EXC: 0, State: S, CPU: 0, CMD: knetatop

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:19, motion_status: 1, light_status:  on

[Assistant] normal


[User] PID: 3197, MINFLT: 0, MAJFLT: 0, VSTEXT: 193, VSIZE: 2.3, RSIZE: 232.1, VGROW: 0, RGROW: 0, MEM: 0.06, CMD: firefox

[Assistant] normal


[User] PID: 1864, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vmtoolsd, attack: 1

[Assistant] attack


[User] date: 26-Apr-19, time:  14:37:49 , current_temperature: 33.88465167, thermostat_status: 1

[Assistant] attack


[User] date: 2-Apr-19, time:  00:01:14 , current_temperature: 28.18061282, thermostat_status: 1

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:24, FC1_Read_Input_Register: 43641, FC2_Read_Discrete_Value: 9684, FC3_Read_Holding_Register: 22487, FC4_Read_Coil: 15180

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:09, FC1_Read_Input_Register: 4623, FC2_Read_Discrete_Value: 64438, FC3_Read_Holding_Register: 7641, FC4_Read_Coil: 50383

[Assistant] normal


[User] date: 26-Apr-19, time: 13:46:33, motion_status: 1, light_status:  on

[Assistant] attack


[User] PID: 4975, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: 0, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] date: 31-Mar-19, time:    12:40:37   , fridge_temperature: 4, temp_condition: low

[Assistant] normal


[User] date: 28-Apr-19, time:  05:12:02 , motion_status: 0, light_status:  off

[Assistant] attack


[User] date: 2-Apr-19, time:    04:02:01   , fridge_temperature: 5.5, temp_condition: low

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 50656, dst_ip: 52.28.231.150, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time:    12:44:45   , fridge_temperature: 7.7, temp_condition: high

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 35254, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: -, duration: 0.000312, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 51862, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3677, TRUN: 1, TSLPI: 0, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: R, CPU: 0, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 59656, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.059896, src_bytes: 312, dst_bytes: 1919, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 580, dst_pkts: 6, dst_ip_bytes: 2239, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2608, MINFLT: 13, MAJFLT: 0, VSTEXT: 589, VSIZE: 639.4, RSIZE: 31240, VGROW: 0, RGROW: 0, MEM: 0.01, CMD: hud-service

[Assistant] attack


[User] date: 26-Apr-19, time:  18:29:51 , latitude: 156.6939974, longitude: 163.5335956

[Assistant] attack


[User] PID: 2849, TRUN: 0, TSLPI: 5, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: 0, EXC: 0, State: S, CPU: 0.01, CMD: nautilus

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49530, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000116, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 53018, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 0.017128, src_bytes: 161, dst_bytes: 2009, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 381, dst_pkts: 5, dst_ip_bytes: 2221, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 42823, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000017, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 35709, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000043, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 11551, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: worer/u256:1, attack: 1

[Assistant] attack


[User] date: 2-Apr-19, time:    04:05:58   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] date: 31-Mar-19, time: 12:40:53, motion_status: 0, light_status:  off

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 38108, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.15165, src_bytes: 240, dst_bytes: 1919, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 508, dst_pkts: 6, dst_ip_bytes: 2239, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:  04:06:35 , motion_status: 0, light_status:  off

[Assistant] normal


[User] date: 26-Apr-19, time:  15:10:34 , temperature: 40.39887542, pressure: 4.187819993, humidity: 13.65850313

[Assistant] attack


[User] date: 25-Apr-19, time:  09:25:22 , door_state: open, sphone_signal: 1

[Assistant] attack


[User] src_ip: 172.17.0.5, src_port: 41985, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000366, src_bytes: 0, dst_bytes: 178, conn_state: SHR, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 2, dst_ip_bytes: 234, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 47387, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000055, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 76.06049386, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 20.90446968, Processor_pct_ C1_Time: 76.06049386, Processor_pct_ Processor_Time: 22.70026322, Processor_C1_ransitions_sec: 567.305603, Processor_pct_ DPC_Time: 0.078001753, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 1.794040309, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 31.84978658, Processor_Interrupts_sec: 1072.009901, Process_Pool_Paged Bytes: 20512872, Process_IO Read_Operations_sec: 0, Process_Working_Set_ Private: 1706459136, Process_Working_Set_Peak: 5520461824, Process_IO_Write Operations_sec: 0, Process_Page_File Bytes: 2814808064, Process_pct_ User_Time: 41.80893937, Process_Virtual_Bytes Peak: 1.48E+14, Process_Page_File Bytes Peak: 3868696576, Process_IO_Other_Bytes_sec: 3174.295501, Process_Private_Bytes: 2814808064, Process_IO_Write_Bytes_sec: 0, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.48E+14, Process_pct_ Processor_Time: 199.84049, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2191024, Process_Working Set: 2235265024, Process_Page Faults_sec: 1062.32517, Process_ID Process: 0, Process_IO Other Operations_sec: 68.29233236, Process_IO Data Operations_sec: 0, Process_Thread Count: 964, Process_pct_ Privileged_Time: 158.0315507, Process_IO Data Bytes_sec: 0, Process_IO Read Bytes_sec: 0, Process_Priority Base: 0, Process_Handle Count: 36602, Network_I(Intel R _82574L_GNC)TCP_APS: 4864, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4844.662051, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 262.9853851, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5107.647436, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 4.892286967, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 6.988981382, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 11.88126835, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 2, Network_I(Intel R _82574L_GNC) Packets Sent sec: 4.892286967, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 6.988981382, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 108580864, Memory Free & Zero Page List Bytes: 35307520, Memory Cache Bytes Peak: 157425664, Memory System Code Resident Bytes: 0, Memory Available Bytes: 395329536, Memory Commit Limit: 8460087296, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 14.37733313, Memory Page Reads sec: 4.29323142, Memory Demand Zero Faults sec: 872.324719, Memory Available KBytes: 386064, Memory Pages sec: 40.6359346, Memory Cache Bytes: 26939392, Memory Pool Nonpaged Bytes: 96063488, Memory Page Faults sec: 1071.211161, Memory Transition Faults sec: 328.2824398, Memory System Cache Resident Bytes: 26939392, Memory Long-Term Average Standby Cache Lifetime (s): 27, Memory Standby Cache Reserve Bytes: 95588352, Memory Page Writes sec: 3.794018464, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 158400512, Memory System Driver Resident Bytes: 4395008, Memory Standby Cache Normal Priority Bytes: 106033152, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 43.7613383, Memory Free System Page Table Entries: 12211770, Memory Available MBytes: 377, Memory Modified Page List Bytes: 114688, Memory Cache Faults sec: 0.199685182, Memory Committed Bytes: 3702247424, Memory System Driver Total Bytes: 18259968, Memory Pages Input sec: 26.25860148, Memory Pool Paged Resident Bytes: 61616128, Memory Write Copies sec: 2.196537006, LogicalDisk(_Total) Avg  Disk Bytes Write: 15185.17073, LogicalDisk(_Total) pct_ Idle Time: 99.90843368, LogicalDisk(_Total) Disk Reads sec: 4.792444376, LogicalDisk(_Total) pct_ Free Space: 81.27116284, LogicalDisk(_Total) Disk Read Bytes sec: 103158.9627, LogicalDisk(_Total) Avg  Disk sec Read: 0.000394725, LogicalDisk(_Total) Disk Writes sec: 4.093546238, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.599055547, LogicalDisk(_Total) Free Megabytes: 166332, LogicalDisk(_Total) Avg  Disk sec Write: 0.000319112, LogicalDisk(_Total) Disk Bytes sec: 165320.1612, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.001891691, LogicalDisk(_Total) pct_ Disk Time: 0.106599566, LogicalDisk(_Total) Avg  Disk Bytes Read: 21525.33333, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.001306296, LogicalDisk(_Total) Avg  Disk Queue Length: 0.003197987, LogicalDisk(_Total) pct_ Disk Read Time: 0.063056367, LogicalDisk(_Total) Disk Write Bytes sec: 62161.19852, LogicalDisk(_Total) Disk Transfers sec: 8.885990614, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 18604.58427, LogicalDisk(_Total) pct_ Disk Write Time: 0.043543199, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000359892

[Assistant] normal


[User] PID: 1414, TRUN: 0, TSLPI: 2, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: vmtoolsd

[Assistant] attack


[User] PID: 3790, MINFLT: 0, MAJFLT: 0, VSTEXT: 2132, VSIZE: 2.4, RSIZE: 8984, VGROW: 0, RGROW: 0, MEM: 0, CMD: ostinato

[Assistant] normal


[User] PID: 3263, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: WebExtensions, attack: 1

[Assistant] attack


[User] src_ip: fe80::855:e4ef:de26:7aca, src_port: 5353, dst_ip: ff02::fb, dst_port: 5353, proto: udp, service: dns, duration: 17.445644, src_bytes: 672, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 960, dst_pkts: 0, dst_ip_bytes: 0, dns_query: _sleep-proxy._udp.local, dns_qclass: 32769, dns_qtype: 12, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 2-Apr-19, time:    04:02:04   , fridge_temperature: 11.65, temp_condition: high

[Assistant] normal