[User] src_ip: 192.168.1.39, src_port: 39, dst_ip: 192.168.1.190, dst_port: 39, proto: tcp, service: -, duration: 0.431706, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 100, src_ip_bytes: 4000, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2031, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: Xorg, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 41392, dst_ip: 192.168.1.184, dst_port: 443, proto: tcp, service: -, duration: 0.000573, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 50964, dst_ip: 52.59.177.21, dst_port: 80, proto: tcp, service: http, duration: 1.403179, src_bytes: 553, dst_bytes: 12183, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 821, dst_pkts: 11, dst_ip_bytes: 12755, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2123, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 24, dst_ip: 192.168.1.184, dst_port: 24, proto: tcp, service: -, duration: 0.000012, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:27, latitude: 0.570537184, longitude: 10.78987395

[Assistant] normal


[User] src_ip: 192.168.1.79, src_port: 32941, dst_ip: 192.168.1.255, dst_port: 15600, proto: udp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 63, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 10985, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vsftpd, attack: 0

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 80.90637515, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 17.10811328, Processor_pct_ C1_Time: 80.90637515, Processor_pct_ Processor_Time: 18.13103784, Processor_C1_ransitions_sec: 149.0884516, Processor_pct_ DPC_Time: 0, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 1.015550103, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 27.59786227, Processor_Interrupts_sec: 526.4592205, Process_Pool_Paged Bytes: 22070352, Process_IO Read_Operations_sec: 0, Process_Working_Set_ Private: 1270616064, Process_Working_Set_Peak: 5139927040, Process_IO_Write Operations_sec: 0, Process_Page_File Bytes: 2278244352, Process_pct_ User_Time: 34.21622655, Process_Virtual_Bytes Peak: 1.52E+14, Process_Page_File Bytes Peak: 3312750592, Process_IO_Other_Bytes_sec: 2976.269458, Process_Private_Bytes: 2278244352, Process_IO_Write_Bytes_sec: 0, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.52E+14, Process_pct_ Processor_Time: 199.9852511, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2214824, Process_Working Set: 1820246016, Process_Page Faults_sec: 378.7706604, Process_ID Process: 0, Process_IO Other Operations_sec: 46.59639064, Process_IO Data Operations_sec: 0, Process_Thread Count: 977, Process_pct_ Privileged_Time: 165.7690245, Process_IO Data Bytes_sec: 0, Process_IO Read Bytes_sec: 0, Process_Priority Base: 0, Process_Handle Count: 38393, Network_I(Intel R _82574L_GNC)TCP_APS: 5360, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4946.616835, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 281.7781735, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5228.395009, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 5.099604985, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 8.499341641, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 13.59894663, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 2, Network_I(Intel R _82574L_GNC) Packets Sent sec: 5.099604985, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 8.499341641, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 108908544, Memory Free & Zero Page List Bytes: 10268672, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 793128960, Memory Commit Limit: 8473149440, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 485.5623883, Memory Available KBytes: 774540, Memory Pages sec: 0, Memory Cache Bytes: 12627968, Memory Pool Nonpaged Bytes: 88731648, Memory Page Faults sec: 378.7706604, Memory Transition Faults sec: 0.699945782, Memory System Cache Resident Bytes: 12627968, Memory Long-Term Average Standby Cache Lifetime (s): 17, Memory Standby Cache Reserve Bytes: 525529088, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 161243136, Memory System Driver Resident Bytes: 4173824, Memory Standby Cache Normal Priority Bytes: 96088064, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 36.78643939, Memory Free System Page Table Entries: 12209849, Memory Available MBytes: 756, Memory Modified Page List Bytes: 30806016, Memory Cache Faults sec: 0, Memory Committed Bytes: 3116969984, Memory System Driver Total Bytes: 18182144, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 71061504, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 4096, LogicalDisk(_Total) pct_ Idle Time: 99.99137464, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 81.32393251, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 0.299976764, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.099992255, LogicalDisk(_Total) Free Megabytes: 166440, LogicalDisk(_Total) Avg  Disk sec Write: 0.000936767, LogicalDisk(_Total) Disk Bytes sec: 1228.704825, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.009367309, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000281009, LogicalDisk(_Total) Avg  Disk Queue Length: 0.000281009, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 1228.704825, LogicalDisk(_Total) Disk Transfers sec: 0.299976764, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 4096, LogicalDisk(_Total) pct_ Disk Write Time: 0.009367309, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000936767

[Assistant] normal


[User] src_ip: 192.168.1.184, src_port: 8080, dst_ip: 192.168.1.184, dst_port: 1582, proto: tcp, service: -, duration: 0.227283, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 2774, TRUN: 0, TSLPI: 9, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: compiz

[Assistant] normal


[User] PID: 2774, MINFLT: 12, MAJFLT: 0, VSTEXT: 10, VSIZE: 1.3, RSIZE: 61276, VGROW: 0, RGROW: 0, MEM: 0.02, CMD: compiz

[Assistant] normal


[User] src_ip: 192.168.1.37, src_port: 4444, dst_ip: 192.168.1.193, dst_port: 49209, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 1336, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 1-Apr-19, time:  19:07:35 , current_temperature: 29.44983225, thermostat_status: 1

[Assistant] normal


[User] PID: 4470, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: tcpdump

[Assistant] normal


[User] PID: 3790, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: ostinato, attack: 0

[Assistant] normal


[User] Processor_DPC_Rate: 1, Processor_pct_ Idle_Time: 89.17362967, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.078122563, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 0, Processor_pct_ C1_Time: 89.17362967, Processor_pct_ Processor_Time: 0.237486593, Processor_C1_ransitions_sec: 730.5598025, Processor_pct_ DPC_Time: 0.078122563, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 0.23436769, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 236.7869713, Processor_Interrupts_sec: 934.448584, Process_Pool_Paged Bytes: 13732344, Process_IO Read_Operations_sec: 33.39816234, Process_Working_Set_ Private: 231051264, Process_Working_Set_Peak: 3485327360, Process_IO_Write Operations_sec: 32.89818985, Process_Page_File Bytes: 1130827776, Process_pct_ User_Time: 0, Process_Virtual_Bytes Peak: 1.01E+14, Process_Page_File Bytes Peak: 2824429568, Process_IO_Other_Bytes_sec: 178935.6545, Process_Private_Bytes: 1130827776, Process_IO_Write_Bytes_sec: 364742.2309, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.01E+14, Process_pct_ Processor_Time: 199.6812719, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 1609680, Process_Working Set: 917487616, Process_Page Faults_sec: 154.0915215, Process_ID Process: 0, Process_IO Other Operations_sec: 1961.392079, Process_IO Data Operations_sec: 66.29635219, Process_Thread Count: 788, Process_pct_ Privileged_Time: 199.6812719, Process_IO Data Bytes_sec: 676332.7863, Process_IO Read Bytes_sec: 311590.5554, Process_Priority Base: 0, Process_Handle Count: 28547, Network_I(Intel R _82574L_GNC)TCP_APS: 0, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 2342.871089, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 32.69820085, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 2375.569289, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 0.299983494, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 23.49870703, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 23.79869053, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 0, Network_I(Intel R _82574L_GNC) Packets Sent sec: 0.299983494, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 23.49870703, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 351731712, Memory Free & Zero Page List Bytes: 2904064, Memory Cache Bytes Peak: 437018624, Memory System Code Resident Bytes: 3579904, Memory Available Bytes: 741052416, Memory Commit Limit: 3354243072, Memory Transition Pages RePurposed sec: 72.39601657, Memory Pages Output sec: 0, Memory Page Reads sec: 43.79759013, Memory Demand Zero Faults sec: 57.99680885, Memory Available KBytes: 723684, Memory Pages sec: 133.4926549, Memory Cache Bytes: 61177856, Memory Pool Nonpaged Bytes: 102318080, Memory Page Faults sec: 394.8782727, Memory Transition Faults sec: 130.9927924, Memory System Cache Resident Bytes: 0, Memory Long-Term Average Standby Cache Lifetime (s): 433, Memory Standby Cache Reserve Bytes: 430563328, Memory Page Writes sec: 0, Memory System Code Total Bytes: 3825664, Memory Standby Cache Core Bytes: 125415424, Memory System Driver Resident Bytes: 7888896, Memory Standby Cache Normal Priority Bytes: 182169600, Memory Pool Paged Allocs: 478555, Memory Pool Nonpaged Allocs: 221758, Memory pct_ Committed Bytes In Use: 57.06032551, Memory Free System Page Table Entries: 12236409, Memory Available MBytes: 706, Memory Modified Page List Bytes: 38408192, Memory Cache Faults sec: 201.588908, Memory Committed Bytes: 1913942016, Memory System Driver Total Bytes: 17145856, Memory Pages Input sec: 133.4926549, Memory Pool Paged Resident Bytes: 269185024, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 14728.47387, LogicalDisk(_Total) pct_ Idle Time: 15.19258314, LogicalDisk(_Total) Disk Reads sec: 36.79797527, LogicalDisk(_Total) pct_ Free Space: 92.61844094, LogicalDisk(_Total) Disk Read Bytes sec: 448999.2948, LogicalDisk(_Total) Avg  Disk sec Read: 0.000650265, LogicalDisk(_Total) Disk Writes sec: 86.0952628, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.199988996, LogicalDisk(_Total) Free Megabytes: 189376, LogicalDisk(_Total) Avg  Disk sec Write: 0.009627607, LogicalDisk(_Total) Disk Bytes sec: 1717051.123, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.023928994, LogicalDisk(_Total) pct_ Disk Time: 85.28400899, LogicalDisk(_Total) Avg  Disk Bytes Read: 12201.73913, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.828911096, LogicalDisk(_Total) Avg  Disk Queue Length: 0.85284009, LogicalDisk(_Total) pct_ Disk Read Time: 2.392899365, LogicalDisk(_Total) Disk Write Bytes sec: 1268051.828, LogicalDisk(_Total) Disk Transfers sec: 122.8932381, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 13971.8926, LogicalDisk(_Total) pct_ Disk Write Time: 82.89110963, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.006939517

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 71.92215284, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.156496625, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 11.26775697, Processor_pct_ C1_Time: 71.92215284, Processor_pct_ Processor_Time: 25.66410332, Processor_C1_ransitions_sec: 417.2586678, Processor_pct_ DPC_Time: 0.625986498, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 14.39768946, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 322.4089419, Processor_Interrupts_sec: 1210.611022, Process_Pool_Paged Bytes: 27980632, Process_IO Read_Operations_sec: 62.69897409, Process_Working_Set_ Private: 928927744, Process_Working_Set_Peak: 4300152832, Process_IO_Write Operations_sec: 53.18395406, Process_Page_File Bytes: 2389848064, Process_pct_ User_Time: 22.53551394, Process_Virtual_Bytes Peak: 2.56E+14, Process_Page_File Bytes Peak: 3067768832, Process_IO_Other_Bytes_sec: 94216.92707, Process_Private_Bytes: 2389848064, Process_IO_Write_Bytes_sec: 36177.70868, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 2.56E+14, Process_pct_ Processor_Time: 198.43772, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2672256, Process_Working Set: 2592149504, Process_Page Faults_sec: 1758.776334, Process_ID Process: 0, Process_IO Other Operations_sec: 4496.097359, Process_IO Data Operations_sec: 115.8829282, Process_Thread Count: 1467, Process_pct_ Privileged_Time: 175.902206, Process_IO Data Bytes_sec: 49660.99286, Process_IO Read Bytes_sec: 13483.28417, Process_Priority Base: 0, Process_Handle Count: 51290, Network_I(Intel R _82574L_GNC)TCP_APS: 8365, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 15354.13743, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 42623.88436, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 57978.02179, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 145.6298855, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 166.4627715, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 312.092657, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 8, Network_I(Intel R _82574L_GNC) Packets Sent sec: 145.6298855, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 166.4627715, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 195633152, Memory Free & Zero Page List Bytes: 161644544, Memory Cache Bytes Peak: 73678848, Memory System Code Resident Bytes: 0, Memory Available Bytes: 590766080, Memory Commit Limit: 6038605824, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 1.8028459, Memory Demand Zero Faults sec: 965.2236635, Memory Available KBytes: 576920, Memory Pages sec: 2.503952639, Memory Cache Bytes: 66625536, Memory Pool Nonpaged Bytes: 126693376, Memory Page Faults sec: 1838.602344, Memory Transition Faults sec: 836.3201816, Memory System Cache Resident Bytes: 66625536, Memory Long-Term Average Standby Cache Lifetime (s): 11447, Memory Standby Cache Reserve Bytes: 3805184, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 216662016, Memory System Driver Resident Bytes: 3891200, Memory Standby Cache Normal Priority Bytes: 208654336, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 76.72202291, Memory Free System Page Table Entries: 12262929, Memory Available MBytes: 563, Memory Modified Page List Bytes: 909312, Memory Cache Faults sec: 72.11383602, Memory Committed Bytes: 4632940544, Memory System Driver Total Bytes: 19177472, Memory Pages Input sec: 2.503952639, Memory Pool Paged Resident Bytes: 168427520, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 14565.05263, LogicalDisk(_Total) pct_ Idle Time: 99.89154909, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 81.3351705, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 15.22403205, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.600948633, LogicalDisk(_Total) Free Megabytes: 166463, LogicalDisk(_Total) Avg  Disk sec Write: 0.000214527, LogicalDisk(_Total) Disk Bytes sec: 221738.828, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.108865562, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.003265957, LogicalDisk(_Total) Avg  Disk Queue Length: 0.003265957, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 221738.828, LogicalDisk(_Total) Disk Transfers sec: 15.22403205, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 14565.05263, LogicalDisk(_Total) pct_ Disk Write Time: 0.108864561, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000214527

[Assistant] attack


[User] date: 2-Apr-19, time:  04:06:38 , current_temperature: 32.82363488, thermostat_status: 0

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:01, motion_status: 1, light_status:  on

[Assistant] normal


[User] PID: 3678, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: atop

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 66.77577017, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.469479393, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 19.79638105, Processor_pct_ C1_Time: 66.77577017, Processor_pct_ Processor_Time: 29.65633768, Processor_C1_ransitions_sec: 258.2008232, Processor_pct_ DPC_Time: 0.156493131, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 9.780820679, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 34.85410647, Processor_Interrupts_sec: 1064.853046, Process_Pool_Paged Bytes: 30706816, Process_IO Read_Operations_sec: 27.44260107, Process_Working_Set_ Private: 1509093376, Process_Working_Set_Peak: 5514883072, Process_IO_Write Operations_sec: 21.43327237, Process_Page_File Bytes: 2561011712, Process_pct_ User_Time: 39.59276211, Process_Virtual_Bytes Peak: 2.54E+14, Process_Page_File Bytes Peak: 3610066944, Process_IO_Other_Bytes_sec: 10125.51855, Process_Private_Bytes: 2561011712, Process_IO_Write_Bytes_sec: 27461.53046, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 2.54E+14, Process_pct_ Processor_Time: 198.5897831, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2831136, Process_Working Set: 3485040640, Process_Page Faults_sec: 1949.826853, Process_ID Process: 0, Process_IO Other Operations_sec: 195.4033383, Process_IO Data Operations_sec: 48.87587344, Process_Thread Count: 1421, Process_pct_ Privileged_Time: 158.997021, Process_IO Data Bytes_sec: 87728.68738, Process_IO Read Bytes_sec: 60267.15693, Process_Priority Base: 0, Process_Handle Count: 51603, Network_I(Intel R _82574L_GNC)TCP_APS: 10308, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 2653.419088, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 170.6649351, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 2824.084023, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 3.204975308, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 5.608706788, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 8.813682096, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 3, Network_I(Intel R _82574L_GNC) Packets Sent sec: 3.204975308, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 5.608706788, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 147046400, Memory Free & Zero Page List Bytes: 550080512, Memory Cache Bytes Peak: 199274496, Memory System Code Resident Bytes: 0, Memory Available Bytes: 944304128, Memory Commit Limit: 5770170368, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0.701088349, Memory Demand Zero Faults sec: 1341.081855, Memory Available KBytes: 922172, Memory Pages sec: 4.807462961, Memory Cache Bytes: 29851648, Memory Pool Nonpaged Bytes: 100851712, Memory Page Faults sec: 1957.438669, Memory Transition Faults sec: 666.2342421, Memory System Cache Resident Bytes: 29851648, Memory Long-Term Average Standby Cache Lifetime (s): 9002, Memory Standby Cache Reserve Bytes: 94740480, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 197189632, Memory System Driver Resident Bytes: 5234688, Memory Standby Cache Normal Priority Bytes: 102293504, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 68.8429248, Memory Free System Page Table Entries: 12263393, Memory Available MBytes: 900, Memory Modified Page List Bytes: 1400832, Memory Cache Faults sec: 4.90761844, Memory Committed Bytes: 3972354048, Memory System Driver Total Bytes: 18079744, Memory Pages Input sec: 4.807462961, Memory Pool Paged Resident Bytes: 88223744, Memory Write Copies sec: 0.701088349, LogicalDisk(_Total) Avg  Disk Bytes Write: 7017.094737, LogicalDisk(_Total) pct_ Idle Time: 99.82015559, LogicalDisk(_Total) Disk Reads sec: 0.901399305, LogicalDisk(_Total) pct_ Free Space: 81.74755574, LogicalDisk(_Total) Disk Read Bytes sec: 19691.36829, LogicalDisk(_Total) Avg  Disk sec Read: 0.000383844, LogicalDisk(_Total) Disk Writes sec: 9.514770444, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.901399305, LogicalDisk(_Total) Free Megabytes: 167307, LogicalDisk(_Total) Avg  Disk sec Write: 0.000539764, LogicalDisk(_Total) Disk Bytes sec: 86457.4139, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.000345998, LogicalDisk(_Total) pct_ Disk Time: 0.182723883, LogicalDisk(_Total) Avg  Disk Bytes Read: 21845.33333, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.005135739, LogicalDisk(_Total) Avg  Disk Queue Length: 0.005481737, LogicalDisk(_Total) pct_ Disk Read Time: 0.011532918, LogicalDisk(_Total) Disk Write Bytes sec: 66766.04561, LogicalDisk(_Total) Disk Transfers sec: 10.41616975, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 8300.307692, LogicalDisk(_Total) pct_ Disk Write Time: 0.171190966, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000526271

[Assistant] attack


[User] date: 25-Apr-19, time: 9:02:27, temperature: 39.3257223, pressure: -1.77843573, humidity: 86.72626669

[Assistant] attack


[User] src_ip: 192.168.1.33, src_port: 37033, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 1205, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 48706, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.020603, src_bytes: 78, dst_bytes: 164, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 134, dst_pkts: 2, dst_ip_bytes: 220, dns_query: feedburner.google.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:35, latitude: 1.186552816, longitude: 11.11297873

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:21, FC1_Read_Input_Register: 30713, FC2_Read_Discrete_Value: 8322, FC3_Read_Holding_Register: 23914, FC4_Read_Coil: 13214

[Assistant] normal


[User] PID: 2088, MINFLT: 132, MAJFLT: 1.1, VSTEXT: 17264, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: pulseaudio

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 34906, dst_ip: 151.101.24.64, dst_port: 443, proto: tcp, service: ssl, duration: 116.169967, src_bytes: 1348, dst_bytes: 6928, conn_state: SF, missed_bytes: 0, src_pkts: 27, src_ip_bytes: 2736, dst_pkts: 24, dst_ip_bytes: 8184, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  20:39:49 , fridge_temperature: 3.05, temp_condition: low

[Assistant] attack


[User] date: 25-Apr-19, time:  09:58:19 , FC1_Read_Input_Register: 49344, FC2_Read_Discrete_Value: 55741, FC3_Read_Holding_Register: 20738, FC4_Read_Coil: 6429

[Assistant] attack


[User] Processor(_Total) DPC Rate: 0, Processor(_Total) pct_ Idle Time: 100, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 0, Processor(_Total) pct_ C1 Time: 100, Processor(_Total) pct_ Processor Time: 0, Processor(_Total) C1 Transitions sec: 65.14410035, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 0, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 1.200198369, Processor(_Total) Interrupts sec: 66.01091028, Process(_Total) Pool Paged Bytes: 4957400, Process(_Total) IO Read Operations sec: 0, Process(_Total) Working Set - Private: 159588352, Process(_Total) Working Set Peak: 926511104, Process(_Total) IO Write Operations sec: 0.066677687, Process(_Total) Page File Bytes: 522989568, Process(_Total) pct_ User Time: 0, Process(_Total) Virtual Bytes Peak: 4130967552, Process(_Total) Page File Bytes Peak: 749076480, Process(_Total) IO Other Bytes sec: 899.8820658, Process(_Total) Private Bytes: 522989568, Process(_Total) IO Write Bytes sec: 34.13897582, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 3341602816, Process(_Total) pct_ Processor Time: 100, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 703568, Process(_Total) Working Set: 441282560, Process(_Total) Page Faults sec: 0.266710749, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 41.74023216, Process(_Total) IO Data Operations sec: 0.066677687, Process(_Total) Thread Count: 425, Process(_Total) pct_ Privileged Time: 100, Process(_Total) IO Data Bytes sec: 34.13897582, Process(_Total) IO Read Bytes sec: 0, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 10904, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 36.40601719, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 0, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 36.40601719, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 0, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 0.533421497, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 0.533421497, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 0, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 0.533421497, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 98258944, Memory Free & Zero Page List Bytes: 2822144, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 2441216, Memory Available Bytes: 585891840, Memory Commit Limit: 2146951168, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 2.400396738, Memory Available KBytes: 572160, Memory Pages sec: 0, Memory Cache Bytes: 15044608, Memory Pool Nonpaged Bytes: 51367936, Memory Page Faults sec: 2.400396738, Memory Transition Faults sec: 0.400066123, Memory System Cache Resident Bytes: 15044608, Memory Standby Cache Reserve Bytes: 485605376, Memory Page Writes sec: 0, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 64499712, Memory System Driver Resident Bytes: 3145728, Memory Standby Cache Normal Priority Bytes: 32964608, Memory Pool Paged Allocs: 77089, Memory Pool Nonpaged Allocs: 57663, Memory pct_ Committed Bytes In Use: 39.08249039, Memory Free System Page Table Entries: 33557571, Memory Available MBytes: 558, Memory Modified Page List Bytes: 29708288, Memory Cache Faults sec: 0, Memory Committed Bytes: 839081984, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 31985664, Memory Write Copies sec: 0

[Assistant] normal


[User] PID: 1501, MINFLT: 0, MAJFLT: 0, VSTEXT: 148, VSIZE: 280.7, RSIZE: 4052, VGROW: 0, RGROW: 0, MEM: 0, CMD: accounts-daemo

[Assistant] attack


[User] date: 31-Mar-19, time:    12:42:37   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 80, dst_ip: 192.168.1.193, dst_port: 1869, proto: tcp, service: -, duration: 0.232544, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 2076, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: colord

[Assistant] normal


[User] PID: 2707, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: indicator-keyb

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 60597, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.004541, src_bytes: 66, dst_bytes: 160, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 122, dst_pkts: 2, dst_ip_bytes: 216, dns_query: trc.taboola.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  18:44:06 , current_temperature: 30.65500552, thermostat_status: 1

[Assistant] attack


[User] PID: 1864, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vmtoolsd, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.36, src_port: 36992, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 125.206305, src_bytes: 1762, dst_bytes: 3166, conn_state: RSTR, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 2022, dst_pkts: 7, dst_ip_bytes: 3458, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 26-Apr-19, time:  15:02:55 , current_temperature: 30.7759207, thermostat_status: 1

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:21, temperature: 48.56725204, pressure: 0.628320017, humidity: 5.12090697

[Assistant] normal


[User] PID: 4149, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: N, EXC: 0, State: S, CPU: 0, CMD: vsftpd

[Assistant] attack


[User] date: 31-Mar-19, time:    12:42:13   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] PID: 1457, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: 0, EXC: 0, State: S, CPU: 0, CMD: Xorg

[Assistant] attack


[User] date: 31-Mar-19, time: 12:38:50, latitude: 0.304648616, longitude: 10.12941341

[Assistant] normal


[User] PID: 1401, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: 0, EXC: 0, State: S, CPU: 0, CMD: irqbalance

[Assistant] attack


[User] date: 1-Apr-19, time:  19:03:05 , current_temperature: 28.04998116, thermostat_status: 1

[Assistant] normal


[User] date: 1-Apr-19, time:   21:00:04   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] PID: 2061, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 0

[Assistant] normal


[User] src_ip: fe80::76:ad3e:1329:a7fd, src_port: 5353, dst_ip: ff02::fb, dst_port: 5353, proto: udp, service: dns, duration: 3.98022, src_bytes: 270, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 3, src_ip_bytes: 414, dst_pkts: 0, dst_ip_bytes: 0, dns_query: _sleep-proxy._udp.local, dns_qclass: 32769, dns_qtype: 12, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 12039, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <vsftpd>, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 38, dst_ip: 192.168.1.152, dst_port: 38, proto: tcp, service: -, duration: 0.000127, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: fe80::e4a6:b91f:48f3:ac01, src_port: 49361, dst_ip: ff02::1:3, dst_port: 5355, proto: udp, service: dns, duration: 0.320251, src_bytes: 66, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 162, dst_pkts: 0, dst_ip_bytes: 0, dns_query: desktop-p3kklkq, dns_qclass: 1, dns_qtype: 255, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 10409, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: worer/u256:2, attack: 1

[Assistant] attack


[User] PID: 2119, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 0

[Assistant] normal


[User] PID: 3895, RDDSK: 0, WRDSK: 12, WCANCL: 0, DSK: 0.15, CMD: atop, attack: 0

[Assistant] normal


[User] PID: 1442, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: Xorg

[Assistant] normal


[User] date: 2-Apr-19, time:    04:07:01   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] PID: 3790, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: ostinato, attack: 0

[Assistant] normal


[User] date: 2-Apr-19, time:  04:06:52 , motion_status: 0, light_status:  off

[Assistant] normal


[User] date: 28-Apr-19, time:  05:08:25 , motion_status: 0, light_status:  off

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:43, FC1_Read_Input_Register: 59782, FC2_Read_Discrete_Value: 55423, FC3_Read_Holding_Register: 32732, FC4_Read_Coil: 36241

[Assistant] normal


[User] src_ip: 192.168.1.195, src_port: 52042, dst_ip: 192.168.1.1, dst_port: 41952, proto: tcp, service: http, duration: 0.01298, src_bytes: 226, dst_bytes: 3978, conn_state: SF, missed_bytes: 0, src_pkts: 7, src_ip_bytes: 518, dst_pkts: 9, dst_ip_bytes: 4350, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 14799, RDDSK: 0, WRDSK: 8, WCANCL: 0, DSK: 0.09, CMD: atop, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 54650, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000033, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 27-Apr-19, time:  05:01:00 , current_temperature: 30.12250788, thermostat_status: 1

[Assistant] attack


[User] date: 2-Apr-19, time:    04:01:23   , fridge_temperature: 10.55, temp_condition: high

[Assistant] normal


[User] date: 2-Apr-19, time:    04:02:22   , fridge_temperature: 4.5, temp_condition: low

[Assistant] normal


[User] PID: 9068, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vsftpd, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.190, src_port: 1289, dst_ip: 192.168.1.190, dst_port: 1289, proto: tcp, service: -, duration: 0.228251, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:23, FC1_Read_Input_Register: 32039, FC2_Read_Discrete_Value: 13332, FC3_Read_Holding_Register: 4599, FC4_Read_Coil: 12796

[Assistant] normal


[User] PID: 4075, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 0

[Assistant] normal


[User] date: 2-Apr-19, time:  04:06:45 , motion_status: 0, light_status:  off

[Assistant] normal


[User] date: 26-Apr-19, time: 18:06:34, fridge_temperature: 3.2, temp_condition: low

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:29, latitude: 0, longitude: 10

[Assistant] normal


[User] date: 28-Apr-19, time:  05:05:31 , fridge_temperature: 6.7, temp_condition: high

[Assistant] attack


[User] Processor_DPC_Rate: 3, Processor_pct_ Idle_Time: 34.92471554, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.859338573, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 38.20150564, Processor_pct_ C1_Time: 34.92471554, Processor_pct_ Processor_Time: 59.92357384, Processor_C1_ransitions_sec: 1224.334083, Processor_pct_ DPC_Time: 0.781216884, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 21.71782938, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 1067.742514, Processor_Interrupts_sec: 3709.400289, Process_Pool_Paged Bytes: 14767088, Process_IO Read_Operations_sec: 1764.604995, Process_Working_Set_ Private: 394178560, Process_Working_Set_Peak: 4251672576, Process_IO_Write Operations_sec: 444.9760429, Process_Page_File Bytes: 1097515008, Process_pct_ User_Time: 67.02840867, Process_Virtual_Bytes Peak: 1.25E+14, Process_Page_File Bytes Peak: 3382390784, Process_IO_Other_Bytes_sec: 63963.75624, Process_Private_Bytes: 1097515008, Process_IO_Write_Bytes_sec: 40519373.07, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.25E+14, Process_pct_ Processor_Time: 184.9921582, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 1887248, Process_Working Set: 1129201664, Process_Page Faults_sec: 21592.63747, Process_ID Process: 0, Process_IO Other Operations_sec: 1713.80773, Process_IO Data Operations_sec: 2209.581038, Process_Thread Count: 913, Process_pct_ Privileged_Time: 117.9637495, Process_IO Data Bytes_sec: 90764744.1, Process_IO Read Bytes_sec: 50245371.03, Process_Priority Base: 0, Process_Handle Count: 30542, Network_I(Intel R _82574L_GNC)TCP_APS: 0, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 81.89559081, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 0, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 81.89559081, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 0, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 1.199935396, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 1.199935396, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 0, Network_I(Intel R _82574L_GNC) Packets Sent sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 1.199935396, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 196890624, Memory Free & Zero Page List Bytes: 2023424, Memory Cache Bytes Peak: 437018624, Memory System Code Resident Bytes: 2224128, Memory Available Bytes: 740151296, Memory Commit Limit: 3354243072, Memory Transition Pages RePurposed sec: 7462.798209, Memory Pages Output sec: 206.2888936, Memory Page Reads sec: 584.8685112, Memory Demand Zero Faults sec: 9515.587689, Memory Available KBytes: 722804, Memory Pages sec: 5834.685865, Memory Cache Bytes: 38543360, Memory Pool Nonpaged Bytes: 73564160, Memory Page Faults sec: 43188.17478, Memory Transition Faults sec: 16175.42913, Memory System Cache Resident Bytes: 0, Memory Long-Term Average Standby Cache Lifetime (s): 247, Memory Standby Cache Reserve Bytes: 274509824, Memory Page Writes sec: 60.69673214, Memory System Code Total Bytes: 3825664, Memory Standby Cache Core Bytes: 125161472, Memory System Driver Resident Bytes: 5513216, Memory Standby Cache Normal Priority Bytes: 338132992, Memory Pool Paged Allocs: 145303, Memory Pool Nonpaged Allocs: 111298, Memory pct_ Committed Bytes In Use: 50.62565102, Memory Free System Page Table Entries: 12235467, Memory Available MBytes: 705, Memory Modified Page List Bytes: 22458368, Memory Cache Faults sec: 19758.8362, Memory Committed Bytes: 1698107392, Memory System Driver Total Bytes: 17145856, Memory Pages Input sec: 5628.396972, Memory Pool Paged Resident Bytes: 132526080, Memory Write Copies sec: 24.19869716, LogicalDisk(_Total) Avg  Disk Bytes Write: 122703.0434, LogicalDisk(_Total) pct_ Idle Time: 51.16793299, LogicalDisk(_Total) Disk Reads sec: 529.9714668, LogicalDisk(_Total) pct_ Free Space: 91.7258851, LogicalDisk(_Total) Disk Read Bytes sec: 22800999.61, LogicalDisk(_Total) Avg  Disk sec Read: 0.000728821, LogicalDisk(_Total) Disk Writes sec: 366.2802798, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 156.5915692, LogicalDisk(_Total) Free Megabytes: 187551, LogicalDisk(_Total) Avg  Disk sec Write: 0.00084855, LogicalDisk(_Total) Disk Bytes sec: 67744704.68, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.386258956, LogicalDisk(_Total) pct_ Disk Time: 69.70697112, LogicalDisk(_Total) Avg  Disk Bytes Read: 43023.07019, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.310810755, LogicalDisk(_Total) Avg  Disk Queue Length: 0.697069711, LogicalDisk(_Total) pct_ Disk Read Time: 38.62589565, LogicalDisk(_Total) Disk Write Bytes sec: 44943705.07, LogicalDisk(_Total) Disk Transfers sec: 896.2517465, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 75586.69196, LogicalDisk(_Total) pct_ Disk Write Time: 31.08107547, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000777752

[Assistant] normal


[User] PID: 14821, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: ostinato, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.180, src_port: 59809, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.001351, src_bytes: 41, dst_bytes: 89, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 69, dst_pkts: 1, dst_ip_bytes: 117, dns_query: elasticsearch.mydns.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 39915, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.002107, src_bytes: 58, dst_bytes: 58, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 86, dst_pkts: 1, dst_ip_bytes: 86, dns_query: testphp.vulnweb.com/listproducts.php.hub, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: T, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2887, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: evolution-cale, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 50947, dst_ip: 192.168.1.49, dst_port: 8652, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2460, MINFLT: 0, MAJFLT: 0, VSTEXT: 281, VSIZE: 609.8, RSIZE: 11696, VGROW: 0, RGROW: 0, MEM: 0, CMD: bamfdaemon

[Assistant] normal


[User] date: 28-Apr-19, time:  10:31:24 , latitude: 111.1394904, longitude: 125.325129

[Assistant] attack


[User] date: 28-Apr-19, time: 16:18:46, motion_status: 0, light_status:  off

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 48068, dst_ip: 216.58.200.98, dst_port: 443, proto: tcp, service: ssl, duration: 19.04232, src_bytes: 1293, dst_bytes: 4635, conn_state: SF, missed_bytes: 0, src_pkts: 17, src_ip_bytes: 2185, dst_pkts: 19, dst_ip_bytes: 5631, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 4374, MINFLT: 2073, MAJFLT: 0, VSTEXT: 148, VSIZE: 17948, RSIZE: 2480, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 88.73106698, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 9.311469052, Processor_pct_ C1_Time: 88.73106698, Processor_pct_ Processor_Time: 10.17171033, Processor_C1_ransitions_sec: 157.0458254, Processor_pct_ DPC_Time: 0.078247639, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 0.86072403, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 21.33339337, Processor_Interrupts_sec: 387.3062544, Process_Pool_Paged Bytes: 20119856, Process_IO Read_Operations_sec: 3.605643951, Process_Working_Set_ Private: 812240896, Process_Working_Set_Peak: 4449636352, Process_IO_Write Operations_sec: 0.100156776, Process_Page_File Bytes: 1746792448, Process_pct_ User_Time: 18.6229381, Process_Virtual_Bytes Peak: 1.44E+14, Process_Page_File Bytes Peak: 2771193856, Process_IO_Other_Bytes_sec: 5318.22467, Process_Private_Bytes: 1746792448, Process_IO_Write_Bytes_sec: 6563.874498, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.44E+14, Process_pct_ Processor_Time: 199.8444702, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 1904040, Process_Working Set: 1297485824, Process_Page Faults_sec: 405.1341606, Process_ID Process: 0, Process_IO Other Operations_sec: 90.24125554, Process_IO Data Operations_sec: 3.705800727, Process_Thread Count: 946, Process_pct_ Privileged_Time: 181.2215321, Process_IO Data Bytes_sec: 7490.32468, Process_IO Read Bytes_sec: 926.4501817, Process_Priority Base: 0, Process_Handle Count: 36605, Network_I(Intel R _82574L_GNC)TCP_APS: 5808, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4804.119937, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 263.812949, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5067.932886, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 4.907682044, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 6.510190466, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 11.41787251, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 1, Network_I(Intel R _82574L_GNC) Packets Sent sec: 4.907682044, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 6.510190466, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 196833280, Memory Free & Zero Page List Bytes: 1982464, Memory Cache Bytes Peak: 157425664, Memory System Code Resident Bytes: 0, Memory Available Bytes: 604807168, Memory Commit Limit: 8459431936, Memory Transition Pages RePurposed sec: 142.422936, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 464.527129, Memory Available KBytes: 590632, Memory Pages sec: 0, Memory Cache Bytes: 31453184, Memory Pool Nonpaged Bytes: 122130432, Memory Page Faults sec: 422.1608125, Memory Transition Faults sec: 1.902978752, Memory System Cache Resident Bytes: 31453184, Memory Long-Term Average Standby Cache Lifetime (s): 27, Memory Standby Cache Reserve Bytes: 248532992, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 164147200, Memory System Driver Resident Bytes: 3928064, Memory Standby Cache Normal Priority Bytes: 190144512, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 39.18580963, Memory Free System Page Table Entries: 12213887, Memory Available MBytes: 576, Memory Modified Page List Bytes: 9633792, Memory Cache Faults sec: 1.802821975, Memory Committed Bytes: 3314896896, Memory System Driver Total Bytes: 18259968, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 157388800, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 18022.4, LogicalDisk(_Total) pct_ Idle Time: 99.98923212, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 81.04493729, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 0.500783882, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.100156776, LogicalDisk(_Total) Free Megabytes: 165869, LogicalDisk(_Total) Avg  Disk sec Write: 0.00065114, LogicalDisk(_Total) Disk Bytes sec: 9025.327435, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.010869035, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000326081, LogicalDisk(_Total) Avg  Disk Queue Length: 0.000326081, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 9025.327435, LogicalDisk(_Total) Disk Transfers sec: 0.500783882, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 18022.4, LogicalDisk(_Total) pct_ Disk Write Time: 0.010870037, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.00065114

[Assistant] normal


[User] date: 28-Apr-19, time:  12:09:23 , temperature: 31.55424831, pressure: -0.401268317, humidity: 44.13992324

[Assistant] attack


[User] PID: 12262, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] date: 27-Apr-19, time:  05:03:42 , motion_status: 1, light_status:  on

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49673, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000172, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 36558, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.003005, src_bytes: 86, dst_bytes: 162, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 142, dst_pkts: 2, dst_ip_bytes: 218, dns_query: links.services.disqus.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:58, current_temperature: 33.41659925, thermostat_status: 1

[Assistant] normal


[User] date: 28-Apr-19, time:  12:38:41 , temperature: 35.47323237, pressure: 7.547239966, humidity: 84.75712581

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 42282, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: -, duration: 3.145676, src_bytes: 286, dst_bytes: 2206, conn_state: S2, missed_bytes: 2206, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1172, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: erneloops, attack: 1

[Assistant] attack


[User] PID: 3678, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] PID: 6450, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 1, Status: 0, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] attack


[User] src_ip: 192.168.1.33, src_port: 4444, dst_ip: 192.168.1.193, dst_port: 49235, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  08:07:11 , temperature: 39.02892498, pressure: 2.462797359, humidity: 64.18146443

[Assistant] attack


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 91.74396281, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.234004839, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 3.900080657, Processor_pct_ C1_Time: 91.74396281, Processor_pct_ Processor_Time: 5.696049704, Processor_C1_ransitions_sec: 302.7251363, Processor_pct_ DPC_Time: 0, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 1.872038716, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 26.65818317, Processor_Interrupts_sec: 405.6636638, Process_Pool_Paged Bytes: 30618648, Process_IO Read_Operations_sec: 10.78308533, Process_Working_Set_ Private: 1678684160, Process_Working_Set_Peak: 5892198400, Process_IO_Write Operations_sec: 11.18245886, Process_Page_File Bytes: 3035930624, Process_pct_ User_Time: 7.800161315, Process_Virtual_Bytes Peak: 2.51E+14, Process_Page_File Bytes Peak: 4187852800, Process_IO_Other_Bytes_sec: 6829.487062, Process_Private_Bytes: 3035930624, Process_IO_Write_Bytes_sec: 2709.150345, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 2.51E+14, Process_pct_ Processor_Time: 199.6841297, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2893088, Process_Working Set: 2992832512, Process_Page Faults_sec: 1325.021531, Process_ID Process: 0, Process_IO Other Operations_sec: 134.1895063, Process_IO Data Operations_sec: 21.96554419, Process_Thread Count: 1407, Process_pct_ Privileged_Time: 191.8839683, Process_IO Data Bytes_sec: 5458.437731, Process_IO Read Bytes_sec: 2749.287385, Process_Priority Base: 0, Process_Handle Count: 51495, Network_I(Intel R _82574L_GNC)TCP_APS: 10071, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 2491.691458, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 182.11433, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 2673.805788, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 3.394675011, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 4.892325751, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 8.287000762, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 2, Network_I(Intel R _82574L_GNC) Packets Sent sec: 3.394675011, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 4.892325751, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 146444288, Memory Free & Zero Page List Bytes: 1202151424, Memory Cache Bytes Peak: 199274496, Memory System Code Resident Bytes: 0, Memory Available Bytes: 1623175168, Memory Commit Limit: 5770170368, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 777.4804209, Memory Available KBytes: 1585132, Memory Pages sec: 0, Memory Cache Bytes: 18694144, Memory Pool Nonpaged Bytes: 103673856, Memory Page Faults sec: 1325.021531, Memory Transition Faults sec: 585.0822225, Memory System Cache Resident Bytes: 18694144, Memory Long-Term Average Standby Cache Lifetime (s): 14400, Memory Standby Cache Reserve Bytes: 102060032, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 234229760, Memory System Driver Resident Bytes: 5021696, Memory Standby Cache Normal Priority Bytes: 84733952, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 65.53931794, Memory Free System Page Table Entries: 12263404, Memory Available MBytes: 1547, Memory Modified Page List Bytes: 9830400, Memory Cache Faults sec: 0, Memory Committed Bytes: 3781730304, Memory System Driver Total Bytes: 18079744, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 81666048, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 12288, LogicalDisk(_Total) pct_ Idle Time: 99.99593243, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 81.71237595, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 0.399373531, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 167235, LogicalDisk(_Total) Avg  Disk sec Write: 0.00019335, LogicalDisk(_Total) Disk Bytes sec: 4907.501945, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.002573928, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 7.72E-05, LogicalDisk(_Total) Avg  Disk Queue Length: 7.72E-05, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 4907.501945, LogicalDisk(_Total) Disk Transfers sec: 0.399373531, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 12288, LogicalDisk(_Total) pct_ Disk Write Time: 0.002573928, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.00019335

[Assistant] attack


[User] date: 2-Apr-19, time:    04:05:08   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 61171, dst_ip: 192.168.1.250, dst_port: 1145, proto: tcp, service: -, duration: 0.170329, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 42916, dst_ip: 192.168.1.250, dst_port: 15004, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  17:26:42 , current_temperature: 25, thermostat_status: 0

[Assistant] attack


[User] date: 26-Apr-19, time:  16:50:52 , motion_status: 0, light_status:  off

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 35636, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.028155, src_bytes: 272, dst_bytes: 1919, conn_state: SF, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 592, dst_pkts: 6, dst_ip_bytes: 2239, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:02, FC1_Read_Input_Register: 16082, FC2_Read_Discrete_Value: 9424, FC3_Read_Holding_Register: 62580, FC4_Read_Coil: 531

[Assistant] normal


[User] date: 28-Apr-19, time: 16:24:25, motion_status: 1, light_status:  on

[Assistant] attack


[User] Processor(_Total) DPC Rate: 50, Processor(_Total) pct_ Idle Time: 78.54166667, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 0.833333333, Processor(_Total) pct_ C1 Time: 80, Processor(_Total) pct_ Processor Time: 21.45833333, Processor(_Total) C1 Transitions sec: 3389.589171, Processor(_Total) pct_ DPC Time: 0.104166667, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 20.625, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 3176.785666, Processor(_Total) Interrupts sec: 4351.738354, Process(_Total) Pool Paged Bytes: 7705880, Process(_Total) IO Read Operations sec: 2.266704007, Process(_Total) Working Set - Private: 769744896, Process(_Total) Working Set Peak: 2014875648, Process(_Total) IO Write Operations sec: 1.666694123, Process(_Total) Page File Bytes: 2069094400, Process(_Total) pct_ User Time: 0.833333333, Process(_Total) Virtual Bytes Peak: 7979360256, Process(_Total) Page File Bytes Peak: 2704445440, Process(_Total) IO Other Bytes sec: 4565.675212, Process(_Total) Private Bytes: 2069094400, Process(_Total) IO Write Bytes sec: 5161.551695, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6701207552, Process(_Total) pct_ Processor Time: 99.89583333, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1038312, Process(_Total) Working Set: 823050240, Process(_Total) Page Faults sec: 5183.552057, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 193.0698472, Process(_Total) IO Data Operations sec: 3.93339813, Process(_Total) Thread Count: 553, Process(_Total) pct_ Privileged Time: 99.0625, Process(_Total) IO Data Bytes sec: 5402.288994, Process(_Total) IO Read Bytes sec: 240.7372991, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13612, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 86.53475885, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 79.6013113, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 166.1360701, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 1.133352003, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 1.133352003, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 2.266704007, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 1.133352003, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 1.133352003, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 92659712, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 798720, Memory Available Bytes: 17125376, Memory Commit Limit: 2918703104, Memory Transition Pages RePurposed sec: 5590.358759, Memory Pages Output sec: 2877.847408, Memory Page Reads sec: 2894.447681, Memory Demand Zero Faults sec: 879.8811612, Memory Available KBytes: 16724, Memory Pages sec: 8946.614047, Memory Cache Bytes: 372736, Memory Pool Nonpaged Bytes: 77238272, Memory Page Faults sec: 5279.953645, Memory Transition Faults sec: 1506.691487, Memory System Cache Resident Bytes: 372736, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 335.6055285, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 299008, Memory System Driver Resident Bytes: 1294336, Memory Standby Cache Normal Priority Bytes: 16826368, Memory Pool Paged Allocs: 59061, Memory Pool Nonpaged Allocs: 57275, Memory pct_ Committed Bytes In Use: 83.48690803, Memory Free System Page Table Entries: 33562140, Memory Available MBytes: 16, Memory Modified Page List Bytes: 65536, Memory Cache Faults sec: 0.533342119, Memory Committed Bytes: 2436734976, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 6068.766639, Memory Pool Paged Resident Bytes: 10731520, Memory Write Copies sec: 0

[Assistant] normal


[User] date: 2-Apr-19, time:    04:07:06   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] date: 25-Apr-19, time:  21:08:11 , motion_status: 1, light_status:  on

[Assistant] attack


[User] PID: 3770, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <bash>, attack: 0

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 80.4669136, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 9.438243344, Processor_pct_ C1_Time: 80.4669136, Processor_pct_ Processor_Time: 17.62987627, Processor_C1_ransitions_sec: 803.8379423, Processor_pct_ DPC_Time: 0.312008044, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 8.190211166, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 66.49559925, Processor_Interrupts_sec: 1591.700966, Process_Pool_Paged Bytes: 31389392, Process_IO Read_Operations_sec: 2.496081053, Process_Working_Set_ Private: 904622080, Process_Working_Set_Peak: 4048134144, Process_IO_Write Operations_sec: 2.595924295, Process_Page_File Bytes: 1677803520, Process_pct_ User_Time: 18.87648669, Process_Virtual_Bytes Peak: 2.76E+14, Process_Page_File Bytes Peak: 2370957312, Process_IO_Other_Bytes_sec: 32596.32247, Process_Private_Bytes: 1677803520, Process_IO_Write_Bytes_sec: 5102.189359, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 2.76E+14, Process_pct_ Processor_Time: 199.3731404, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2820104, Process_Working Set: 2868031488, Process_Page Faults_sec: 1828.828666, Process_ID Process: 0, Process_IO Other Operations_sec: 366.2250121, Process_IO Data Operations_sec: 5.092005348, Process_Thread Count: 1864, Process_pct_ Privileged_Time: 180.4966537, Process_IO Data Bytes_sec: 5403.316577, Process_IO Read Bytes_sec: 301.1272182, Process_Priority Base: 0, Process_Handle Count: 54533, Network_I(Intel R _82574L_GNC)TCP_APS: 8635, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 23590.36219, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 1929.470654, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 25519.83284, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 20.06849167, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 34.34607529, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 54.41456695, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 5, Network_I(Intel R _82574L_GNC) Packets Sent sec: 20.06849167, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 34.34607529, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 106823680, Memory Free & Zero Page List Bytes: 1527808, Memory Cache Bytes Peak: 78737408, Memory System Code Resident Bytes: 0, Memory Available Bytes: 853909504, Memory Commit Limit: 6172823552, Memory Transition Pages RePurposed sec: 2954.161848, Memory Pages Output sec: 244.2165702, Memory Page Reads sec: 1.098275663, Memory Demand Zero Faults sec: 1680.461608, Memory Available KBytes: 833896, Memory Pages sec: 248.6096729, Memory Cache Bytes: 70250496, Memory Pool Nonpaged Bytes: 88883200, Memory Page Faults sec: 2251.46511, Memory Transition Faults sec: 653.5738629, Memory System Cache Resident Bytes: 70250496, Memory Long-Term Average Standby Cache Lifetime (s): 877, Memory Standby Cache Reserve Bytes: 304832512, Memory Page Writes sec: 0.998432421, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 174727168, Memory System Driver Resident Bytes: 2318336, Memory Standby Cache Normal Priority Bytes: 372822016, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 61.34746525, Memory Free System Page Table Entries: 12264012, Memory Available MBytes: 814, Memory Modified Page List Bytes: 299008, Memory Cache Faults sec: 0.499216211, Memory Committed Bytes: 3786870784, Memory System Driver Total Bytes: 18083840, Memory Pages Input sec: 4.393102653, Memory Pool Paged Resident Bytes: 83554304, Memory Write Copies sec: 0.599059453, LogicalDisk(_Total) Avg  Disk Bytes Write: 391522.4615, LogicalDisk(_Total) pct_ Idle Time: 99.93441142, LogicalDisk(_Total) Disk Reads sec: 0.998432421, LogicalDisk(_Total) pct_ Free Space: 80.78841803, LogicalDisk(_Total) Disk Read Bytes sec: 17380.71159, LogicalDisk(_Total) Avg  Disk sec Read: 0.00036489, LogicalDisk(_Total) Disk Writes sec: 2.595924295, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 165344, LogicalDisk(_Total) Avg  Disk sec Write: 0.000653985, LogicalDisk(_Total) Disk Bytes sec: 1033743.382, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.000364316, LogicalDisk(_Total) pct_ Disk Time: 0.068732627, LogicalDisk(_Total) Avg  Disk Bytes Read: 17408, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.001697683, LogicalDisk(_Total) Avg  Disk Queue Length: 0.002061999, LogicalDisk(_Total) pct_ Disk Read Time: 0.012143852, LogicalDisk(_Total) Disk Write Bytes sec: 1016362.67, LogicalDisk(_Total) Disk Transfers sec: 3.594356716, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 287601.7778, LogicalDisk(_Total) pct_ Disk Write Time: 0.056588774, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000573681

[Assistant] attack


[User] src_ip: 192.168.1.6, src_port: 5353, dst_ip: 224.0.0.251, dst_port: 5353, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 89, dst_pkts: 0, dst_ip_bytes: 0, dns_query: _googlecast._tcp.local, dns_qclass: 1, dns_qtype: 12, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 54128, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: -, duration: 0.000313, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:42:12, FC1_Read_Input_Register: 3155, FC2_Read_Discrete_Value: 63879, FC3_Read_Holding_Register: 40856, FC4_Read_Coil: 61693

[Assistant] normal


[User] PID: 2533, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: hud-service

[Assistant] normal


[User] PID: 4373, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] date: 31-Mar-19, time:    12:39:49   , fridge_temperature: 6.7, temp_condition: high

[Assistant] normal


[User] PID: 3678, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: atop, attack: 0

[Assistant] normal


[User] Processor_DPC_Rate: 1, Processor_pct_ Idle_Time: 65.34663955, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.547707521, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 14.08390768, Processor_pct_ C1_Time: 65.34663955, Processor_pct_ Processor_Time: 33.02319459, Processor_C1_ransitions_sec: 374.672432, Processor_pct_ DPC_Time: 1.643122563, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 18.93503144, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 307.5699115, Processor_Interrupts_sec: 1234.886685, Process_Pool_Paged Bytes: 28038784, Process_IO Read_Operations_sec: 59.69119741, Process_Working_Set_ Private: 862593024, Process_Working_Set_Peak: 4169478144, Process_IO_Write Operations_sec: 49.07497773, Process_Page_File Bytes: 2251976704, Process_pct_ User_Time: 28.16781536, Process_Virtual_Bytes Peak: 2.58E+14, Process_Page_File Bytes Peak: 2931458048, Process_IO_Other_Bytes_sec: 89755.02953, Process_Private_Bytes: 2251976704, Process_IO_Write_Bytes_sec: 56959.62405, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 2.58E+14, Process_pct_ Processor_Time: 195.6098289, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2665616, Process_Working Set: 2533224448, Process_Page Faults_sec: 1645.614202, Process_ID Process: 0, Process_IO Other Operations_sec: 3797.702205, Process_IO Data Operations_sec: 108.7661751, Process_Thread Count: 1472, Process_pct_ Privileged_Time: 167.4420135, Process_IO Data Bytes_sec: 69711.70694, Process_IO Read Bytes_sec: 12752.08289, Process_Priority Base: 0, Process_Handle Count: 51317, Network_I(Intel R _82574L_GNC)TCP_APS: 8401, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 16744.58271, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 37897.2001, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 54641.78281, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 136.0077954, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 157.6408468, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 293.6486423, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 7, Network_I(Intel R _82574L_GNC) Packets Sent sec: 136.0077954, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 157.6408468, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 189677568, Memory Free & Zero Page List Bytes: 8269824, Memory Cache Bytes Peak: 73678848, Memory System Code Resident Bytes: 0, Memory Available Bytes: 407871488, Memory Commit Limit: 6038605824, Memory Transition Pages RePurposed sec: 217.5323503, Memory Pages Output sec: 0, Memory Page Reads sec: 2.103213331, Memory Demand Zero Faults sec: 1052.207584, Memory Available KBytes: 398312, Memory Pages sec: 3.905967615, Memory Cache Bytes: 64184320, Memory Pool Nonpaged Bytes: 125321216, Memory Page Faults sec: 1902.206229, Memory Transition Faults sec: 825.6614621, Memory System Cache Resident Bytes: 64184320, Memory Long-Term Average Standby Cache Lifetime (s): 3524, Memory Standby Cache Reserve Bytes: 45056, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 215363584, Memory System Driver Resident Bytes: 3891200, Memory Standby Cache Normal Priority Bytes: 184193024, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 78.31521925, Memory Free System Page Table Entries: 12262920, Memory Available MBytes: 388, Memory Modified Page List Bytes: 18530304, Memory Cache Faults sec: 63.29670597, Memory Committed Bytes: 4729147392, Memory System Driver Total Bytes: 19177472, Memory Pages Input sec: 3.905967615, Memory Pool Paged Resident Bytes: 161234944, Memory Write Copies sec: 1.301989205, LogicalDisk(_Total) Avg  Disk Bytes Write: 15095.32203, LogicalDisk(_Total) pct_ Idle Time: 99.90517286, LogicalDisk(_Total) Disk Reads sec: 0.500765079, LogicalDisk(_Total) pct_ Free Space: 81.37181611, LogicalDisk(_Total) Disk Read Bytes sec: 9435.215311, LogicalDisk(_Total) Avg  Disk sec Read: 0.00047536, LogicalDisk(_Total) Disk Writes sec: 11.81805586, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.200306032, LogicalDisk(_Total) Free Megabytes: 166538, LogicalDisk(_Total) Avg  Disk sec Write: 0.000220743, LogicalDisk(_Total) Disk Bytes sec: 187832.5744, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.000238042, LogicalDisk(_Total) pct_ Disk Time: 0.094893239, LogicalDisk(_Total) Avg  Disk Bytes Read: 18841.6, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.002608735, LogicalDisk(_Total) Avg  Disk Queue Length: 0.002846777, LogicalDisk(_Total) pct_ Disk Read Time: 0.007935061, LogicalDisk(_Total) Disk Write Bytes sec: 178397.3591, LogicalDisk(_Total) Disk Transfers sec: 12.31882094, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 15247.60976, LogicalDisk(_Total) pct_ Disk Write Time: 0.086958177, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000231093

[Assistant] attack


[User] PID: 4134, RDDSK: 0, WRDSK: 12, WCANCL: 0, DSK: 0, CMD: atop, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 38274, dst_ip: 18.184.104.180, dst_port: 80, proto: tcp, service: http, duration: 1.527701, src_bytes: 297, dst_bytes: 12183, conn_state: SF, missed_bytes: 0, src_pkts: 7, src_ip_bytes: 669, dst_pkts: 12, dst_ip_bytes: 12815, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 51260, dst_ip: 52.28.231.150, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 4099, TRUN: 0, TSLPI: 0, TSLPU: 0, POLI: -, NICE: 0, PRI: 0, RTPR: 0, CPUNR: 0, Status: NE, EXC: 0, State: E, CPU: 0, CMD: <systemd-udev>

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 56, dst_ip: 192.168.1.184, dst_port: 56, proto: tcp, service: -, duration: 0.000015, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2533, MINFLT: 8, MAJFLT: 0, VSTEXT: 589, VSIZE: 644.1, RSIZE: 18716, VGROW: 0, RGROW: 0, MEM: 0, CMD: hud-service

[Assistant] normal


[User] PID: 3675, MINFLT: 2072, MAJFLT: 0, VSTEXT: 148, VSIZE: 17948, RSIZE: 2604, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] PID: 1851, TRUN: 0, TSLPI: 2, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: vmtoolsd

[Assistant] normal


[User] PID: 2121, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 0

[Assistant] normal