[User] Processor(_Total) DPC Rate: 76, Processor(_Total) pct_ Idle Time: 68.43304455, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 1.249918622, Processor(_Total) pct_ C1 Time: 73.32855916, Processor(_Total) pct_ Processor Time: 31.56695545, Processor(_Total) C1 Transitions sec: 2809.366869, Processor(_Total) pct_ DPC Time: 0.20831977, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 30.31052658, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 2805.100455, Processor(_Total) Interrupts sec: 4176.752513, Process(_Total) Pool Paged Bytes: 7914728, Process(_Total) IO Read Operations sec: 3.466461267, Process(_Total) Working Set - Private: 785010688, Process(_Total) Working Set Peak: 2012786688, Process(_Total) IO Write Operations sec: 3.399798551, Process(_Total) Page File Bytes: 2050134016, Process(_Total) pct_ User Time: 1.249918622, Process(_Total) Virtual Bytes Peak: 8094044160, Process(_Total) Page File Bytes Peak: 2692820992, Process(_Total) IO Other Bytes sec: 9262.184518, Process(_Total) Private Bytes: 2050134016, Process(_Total) IO Write Bytes sec: 1613.237744, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6797856768, Process(_Total) pct_ Processor Time: 99.78516999, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1059440, Process(_Total) Working Set: 843124736, Process(_Total) Page Faults sec: 3899.102299, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 457.3062364, Process(_Total) IO Data Operations sec: 6.866259818, Process(_Total) Thread Count: 558, Process(_Total) pct_ Privileged Time: 98.53525136, Process(_Total) IO Data Bytes sec: 2111.074912, Process(_Total) IO Read Bytes sec: 497.8371682, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13785, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 670.0936281, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 303.9819881, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 974.0756161, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 2.3998578, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 2.533183234, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 4.933041034, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 2.3998578, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 2.533183234, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 92717056, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 1060864, Memory Available Bytes: 17264640, Memory Commit Limit: 2918703104, Memory Transition Pages RePurposed sec: 4934.307626, Memory Pages Output sec: 4480.2012, Memory Page Reads sec: 2290.197631, Memory Demand Zero Faults sec: 170.3232411, Memory Available KBytes: 16860, Memory Pages sec: 10601.57182, Memory Cache Bytes: 458752, Memory Pool Nonpaged Bytes: 56999936, Memory Page Faults sec: 4100.690354, Memory Transition Faults sec: 1643.502617, Memory System Cache Resident Bytes: 458752, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 708.224702, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 155648, Memory System Driver Resident Bytes: 1511424, Memory Standby Cache Normal Priority Bytes: 17108992, Memory Pool Paged Allocs: 58939, Memory Pool Nonpaged Allocs: 52778, Memory pct_ Committed Bytes In Use: 82.15245013, Memory Free System Page Table Entries: 33562140, Memory Available MBytes: 16, Memory Modified Page List Bytes: 16384, Memory Cache Faults sec: 1.466579767, Memory Committed Bytes: 2397786112, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 6121.370622, Memory Pool Paged Resident Bytes: 11411456, Memory Write Copies sec: 0.266650867

[Assistant] normal


[User] Processor(_Total) DPC Rate: 0, Processor(_Total) pct_ Idle Time: 94.11458333, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 5.677083333, Processor(_Total) pct_ C1 Time: 90, Processor(_Total) pct_ Processor Time: 5.885416667, Processor(_Total) C1 Transitions sec: 318.9878593, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 0.208333333, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 23.93242247, Processor(_Total) Interrupts sec: 258.2568374, Process(_Total) Pool Paged Bytes: 10048552, Process(_Total) IO Read Operations sec: 7.533046626, Process(_Total) Working Set - Private: 817205248, Process(_Total) Working Set Peak: 1819734016, Process(_Total) IO Write Operations sec: 5.133137966, Process(_Total) Page File Bytes: 1210445824, Process(_Total) pct_ User Time: 11.35416667, Process(_Total) Virtual Bytes Peak: 8344547328, Process(_Total) Page File Bytes Peak: 1451081728, Process(_Total) IO Other Bytes sec: 8166.222527, Process(_Total) Private Bytes: 1210445824, Process(_Total) IO Write Bytes sec: 35024.4003, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 7204155392, Process(_Total) pct_ Processor Time: 199.8958333, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1232008, Process(_Total) Working Set: 1365270528, Process(_Total) Page Faults sec: 667.5745921, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 288.3890239, Process(_Total) IO Data Operations sec: 12.66618459, Process(_Total) Thread Count: 650, Process(_Total) pct_ Privileged Time: 188.5416667, Process(_Total) IO Data Bytes sec: 44024.32443, Process(_Total) IO Read Bytes sec: 8999.92413, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 16336, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 23791.62782, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 634.7091763, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 24426.337, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 10.13294767, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 23.46577356, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 33.59872123, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 10.13294767, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 23.46577356, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 110153728, Memory Free & Zero Page List Bytes: 168038400, Memory Cache Bytes Peak: 139370496, Memory System Code Resident Bytes: 49152, Memory Available Bytes: 630038528, Memory Commit Limit: 6070345728, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 2.266580401, Memory Demand Zero Faults sec: 708.8396882, Memory Available KBytes: 615272, Memory Pages sec: 2.266580401, Memory Cache Bytes: 53673984, Memory Pool Nonpaged Bytes: 73871360, Memory Page Faults sec: 875.5000118, Memory Transition Faults sec: 157.5273378, Memory System Cache Resident Bytes: 53673984, Memory Standby Cache Reserve Bytes: 138887168, Memory Page Writes sec: 0, Memory System Code Total Bytes: 4370432, Memory Standby Cache Core Bytes: 102989824, Memory System Driver Resident Bytes: 4653056, Memory Standby Cache Normal Priority Bytes: 220123136, Memory Pool Paged Allocs: 100842, Memory Pool Nonpaged Allocs: 113085, Memory pct_ Committed Bytes In Use: 45.05640282, Memory Free System Page Table Entries: 33556544, Memory Available MBytes: 600, Memory Modified Page List Bytes: 34525184, Memory Cache Faults sec: 9.532970508, Memory Committed Bytes: 2735079424, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 2.266580401, Memory Pool Paged Resident Bytes: 74022912, Memory Write Copies sec: 7.733039014

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 59537, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.000002, src_bytes: 58, dst_bytes: 58, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 86, dst_pkts: 1, dst_ip_bytes: 86, dns_query: testphp.vulnweb.com/listproducts.php.hub, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: T, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 57891, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.013445, src_bytes: 86, dst_bytes: 210, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 142, dst_pkts: 2, dst_ip_bytes: 266, dns_query: www.googletagservices.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 36650, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: -, duration: 0.001799, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2906, TRUN: 0, TSLPI: 5, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0.09, CMD: compiz

[Assistant] attack


[User] PID: 2774, MINFLT: 56, MAJFLT: 0, VSTEXT: 10, VSIZE: 1.4, RSIZE: 19512, VGROW: 0, RGROW: 0, MEM: 0.01, CMD: compiz

[Assistant] normal


[User] PID: 2632, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: fwupd, attack: 1

[Assistant] attack


[User] PID: 3029, RDDSK: 0, WRDSK: 8, WCANCL: 0, DSK: 0, CMD: atop, attack: 1

[Assistant] attack


[User] date: 2-Apr-19, time:    04:01:26   , fridge_temperature: 3, temp_condition: low

[Assistant] normal


[User] date: 26-Apr-19, time:  14:46:03 , latitude: 35.1846296, longitude: 45.17579317

[Assistant] attack


[User] date: 2-Apr-19, time:  04:06:25 , current_temperature: 32.96441123, thermostat_status: 1

[Assistant] normal


[User] date: 2-Apr-19, time:  04:06:30 , motion_status: 1, light_status:  on

[Assistant] normal


[User] date: 28-Apr-19, time:  04:24:07 , motion_status: 0, light_status:  off

[Assistant] attack


[User] date: 1-Apr-19, time:  15:19:27 , latitude: 13.2831942, longitude: 21.21922552

[Assistant] normal


[User] date: 31-Mar-19, time:    12:40:50   , fridge_temperature: 3, temp_condition: low

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 83, dst_ip: 192.168.1.190, dst_port: 83, proto: tcp, service: -, duration: 0.000008, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3676, MINFLT: 2055, MAJFLT: 0, VSTEXT: 148, VSIZE: 17648, RSIZE: 2372, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 1880, dst_ip: 192.168.1.152, dst_port: 51782, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 44421, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000032, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 28-Apr-19, time:  05:24:08 , latitude: 49.04567518, longitude: 59.44000138

[Assistant] attack


[User] PID: 2731, TRUN: 0, TSLPI: 2, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: 0, EXC: 0, State: S, CPU: 0.01, CMD: indicator-appl

[Assistant] attack


[User] date: 25-Apr-19, time: 9:05:29, latitude: 74.90531249, longitude: 80.71574889

[Assistant] attack


[User] PID: 1851, TRUN: 0, TSLPI: 2, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: vmtoolsd

[Assistant] normal


[User] src_ip: 192.168.1.37, src_port: 33895, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 184, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1583, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: vmtoolsd

[Assistant] attack


[User] src_ip: 192.168.1.37, src_port: 36907, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 1, dst_ip_bytes: 52, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] Processor_DPC_Rate: 5, Processor_pct_ Idle_Time: 65.39172019, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.312011727, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 12.48046906, Processor_pct_ C1_Time: 65.39172019, Processor_pct_ Processor_Time: 30.96740549, Processor_C1_ransitions_sec: 225.7378586, Processor_pct_ DPC_Time: 0.702026385, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 18.4866948, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 167.2834241, Processor_Interrupts_sec: 932.8769126, Process_Pool_Paged Bytes: 33584160, Process_IO Read_Operations_sec: 41.79591813, Process_Working_Set_ Private: 699097088, Process_Working_Set_Peak: 5110296576, Process_IO_Write Operations_sec: 37.20734478, Process_Page_File Bytes: 2176663552, Process_pct_ User_Time: 24.96093813, Process_Virtual_Bytes Peak: 2.58E+14, Process_Page_File Bytes Peak: 3101683712, Process_IO_Other_Bytes_sec: 181571.5433, Process_Private_Bytes: 2176663552, Process_IO_Write_Bytes_sec: 13820.98244, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 2.58E+14, Process_pct_ Processor_Time: 197.6594288, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 3380576, Process_Working Set: 2253131776, Process_Page Faults_sec: 2674.240499, Process_ID Process: 0, Process_IO Other Operations_sec: 4073.456117, Process_IO Data Operations_sec: 79.00326291, Process_Thread Count: 1638, Process_pct_ Privileged_Time: 172.6984907, Process_IO Data Bytes_sec: 23441.52498, Process_IO Read Bytes_sec: 9620.54254, Process_Priority Base: 0, Process_Handle Count: 57172, Network_I(Intel R _82574L_GNC)TCP_APS: 11224, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 9593.908864, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 14982.98876, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 24576.89763, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 53.26735151, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 60.94822429, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 114.2155758, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 6, Network_I(Intel R _82574L_GNC) Packets Sent sec: 53.26735151, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 60.94822429, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 193785856, Memory Free & Zero Page List Bytes: 430288896, Memory Cache Bytes Peak: 279379968, Memory System Code Resident Bytes: 0, Memory Available Bytes: 1558585344, Memory Commit Limit: 5770170368, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0.897764351, Memory Demand Zero Faults sec: 1477.819874, Memory Available KBytes: 1522056, Memory Pages sec: 1.596025513, Memory Cache Bytes: 66084864, Memory Pool Nonpaged Bytes: 107343872, Memory Page Faults sec: 2923.320231, Memory Transition Faults sec: 1465.650179, Memory System Cache Resident Bytes: 66084864, Memory Long-Term Average Standby Cache Lifetime (s): 14400, Memory Standby Cache Reserve Bytes: 634109952, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 202473472, Memory System Driver Resident Bytes: 724992, Memory Standby Cache Normal Priority Bytes: 291713024, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 64.81121687, Memory Free System Page Table Entries: 12260620, Memory Available MBytes: 1486, Memory Modified Page List Bytes: 35524608, Memory Cache Faults sec: 53.16759992, Memory Committed Bytes: 3739717632, Memory System Driver Total Bytes: 27009024, Memory Pages Input sec: 1.596025513, Memory Pool Paged Resident Bytes: 125976576, Memory Write Copies sec: 6.483853648, LogicalDisk(_Total) Avg  Disk Bytes Write: 9326.276923, LogicalDisk(_Total) pct_ Idle Time: 99.99921423, LogicalDisk(_Total) Disk Reads sec: 0.099751595, LogicalDisk(_Total) pct_ Free Space: 81.84234571, LogicalDisk(_Total) Disk Read Bytes sec: 3268.660251, LogicalDisk(_Total) Avg  Disk sec Read: 0.000454, LogicalDisk(_Total) Disk Writes sec: 6.483853648, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.199503189, LogicalDisk(_Total) Free Megabytes: 167501, LogicalDisk(_Total) Avg  Disk sec Write: 0.00042392, LogicalDisk(_Total) Disk Bytes sec: 63738.8749, LogicalDisk(_Total) Avg  Disk Read Queue Length: 4.53E-05, LogicalDisk(_Total) pct_ Disk Time: 0.093217123, LogicalDisk(_Total) Avg  Disk Bytes Read: 32768, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.002751175, LogicalDisk(_Total) Avg  Disk Queue Length: 0.002796504, LogicalDisk(_Total) pct_ Disk Read Time: 0.001511634, LogicalDisk(_Total) Disk Write Bytes sec: 60470.21465, LogicalDisk(_Total) Disk Transfers sec: 6.583605243, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 9681.454545, LogicalDisk(_Total) pct_ Disk Write Time: 0.091705488, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000424376

[Assistant] attack


[User] date: 1-Apr-19, time:  20:37:27 , motion_status: 0, light_status:  off

[Assistant] normal


[User] PID: 2795, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: nm-applet

[Assistant] normal


[User] PID: 3723, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 92, dst_ip: 192.168.1.184, dst_port: 92, proto: tcp, service: -, duration: 0.000128, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 60266, dst_ip: 18.194.169.124, dst_port: 80, proto: tcp, service: -, duration: 3.052731, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 3, src_ip_bytes: 180, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] Processor(_Total) DPC Rate: 0, Processor(_Total) pct_ Idle Time: 84.375, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 1.041666667, Processor(_Total) pct_ C1 Time: 80, Processor(_Total) pct_ Processor Time: 15.625, Processor(_Total) C1 Transitions sec: 2390.136411, Processor(_Total) pct_ DPC Time: 0.208333333, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 14.58333333, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 2003.591798, Processor(_Total) Interrupts sec: 3173.292597, Process(_Total) Pool Paged Bytes: 7916192, Process(_Total) IO Read Operations sec: 38.93446944, Process(_Total) Working Set - Private: 761511936, Process(_Total) Working Set Peak: 2069159936, Process(_Total) IO Write Operations sec: 1.866721138, Process(_Total) Page File Bytes: 1955966976, Process(_Total) pct_ User Time: 1.041666667, Process(_Total) Virtual Bytes Peak: 8104345600, Process(_Total) Page File Bytes Peak: 2349588480, Process(_Total) IO Other Bytes sec: 24677.98677, Process(_Total) Private Bytes: 1955966976, Process(_Total) IO Write Bytes sec: 1616.180493, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6897311744, Process(_Total) pct_ Processor Time: 99.79166667, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1040776, Process(_Total) Working Set: 815218688, Process(_Total) Page Faults sec: 3180.226132, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 1175.834311, Process(_Total) IO Data Operations sec: 40.80119058, Process(_Total) Thread Count: 541, Process(_Total) pct_ Privileged Time: 98.75, Process(_Total) IO Data Bytes sec: 2605.676034, Process(_Total) IO Read Bytes sec: 989.4955401, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13938, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 839.6911689, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 303.5421907, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 1143.23336, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 2.666744482, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 4.20012256, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 6.866867042, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 2.666744482, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 4.20012256, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 97067008, Memory Free & Zero Page List Bytes: 61440, Memory Cache Bytes Peak: 80883712, Memory System Code Resident Bytes: 724992, Memory Available Bytes: 737280, Memory Commit Limit: 2601299968, Memory Transition Pages RePurposed sec: 4166.654916, Memory Pages Output sec: 2290.466836, Memory Page Reads sec: 1812.186213, Memory Demand Zero Faults sec: 124.6703045, Memory Available KBytes: 720, Memory Pages sec: 7333.280652, Memory Cache Bytes: 315392, Memory Pool Nonpaged Bytes: 57049088, Memory Page Faults sec: 3325.763712, Memory Transition Faults sec: 1388.707189, Memory System Cache Resident Bytes: 315392, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 233.6068166, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 425984, Memory System Driver Resident Bytes: 1318912, Memory Standby Cache Normal Priority Bytes: 249856, Memory Pool Paged Allocs: 61655, Memory Pool Nonpaged Allocs: 53419, Memory pct_ Committed Bytes In Use: 88.91184302, Memory Free System Page Table Entries: 33563833, Memory Available MBytes: 0, Memory Modified Page List Bytes: 61440, Memory Cache Faults sec: 1.600046689, Memory Committed Bytes: 2312863744, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 5042.813816, Memory Pool Paged Resident Bytes: 10948608, Memory Write Copies sec: 0

[Assistant] normal


[User] PID: 1197, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] date: 1-Apr-19, time:  15:06:05 , latitude: 2.96147368, longitude: 13.77346571

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 53794, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.029325, src_bytes: 316, dst_bytes: 1919, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 584, dst_pkts: 6, dst_ip_bytes: 2239, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 44464, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 32884, dst_ip: 216.58.199.34, dst_port: 443, proto: tcp, service: ssl, duration: 0.226271, src_bytes: 508, dst_bytes: 2923, conn_state: SF, missed_bytes: 0, src_pkts: 12, src_ip_bytes: 1164, dst_pkts: 12, dst_ip_bytes: 4707, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:25, FC1_Read_Input_Register: 9572, FC2_Read_Discrete_Value: 50436, FC3_Read_Holding_Register: 29033, FC4_Read_Coil: 37507

[Assistant] normal


[User] date: 26-Apr-19, time: 15:05:54, motion_status: 1, light_status:  on

[Assistant] attack


[User] date: 28-Apr-19, time:  09:46:37 , current_temperature: 28.6844228, thermostat_status: 1

[Assistant] attack


[User] date: 31-Mar-19, time: 12:39:09, motion_status: 1, light_status:  on

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 62947, dst_ip: 192.168.1.169, dst_port: 50002, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 12201, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <vsftpd>, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 54084, dst_ip: 101.119.11.11, dst_port: 80, proto: tcp, service: http, duration: 293.700799, src_bytes: 2304, dst_bytes: 3072, conn_state: SF, missed_bytes: 0, src_pkts: 49, src_ip_bytes: 4860, dst_pkts: 38, dst_ip_bytes: 5056, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 45746, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 11.641684, src_bytes: 2080, dst_bytes: 1143, conn_state: SF, missed_bytes: 0, src_pkts: 10, src_ip_bytes: 4072, dst_pkts: 5, dst_ip_bytes: 1423, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:    04:02:12   , fridge_temperature: 7.7, temp_condition: high

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 91.26455846, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.390619613, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 0.781239227, Processor_pct_ C1_Time: 91.26455846, Processor_pct_ Processor_Time: 4.454442573, Processor_C1_ransitions_sec: 255.5956881, Processor_pct_ DPC_Time: 0, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 3.671824366, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 10.99981443, Processor_Interrupts_sec: 624.4894649, Process_Pool_Paged Bytes: 33063904, Process_IO Read_Operations_sec: 56.29905024, Process_Working_Set_ Private: 618426368, Process_Working_Set_Peak: 4802981888, Process_IO_Write Operations_sec: 56.69904349, Process_Page_File Bytes: 2109210624, Process_pct_ User_Time: 1.562478453, Process_Virtual_Bytes Peak: 2.60E+14, Process_Page_File Bytes Peak: 2956800000, Process_IO_Other_Bytes_sec: 7535.072883, Process_Private_Bytes: 2109210624, Process_IO_Write_Bytes_sec: 5344.609836, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 2.60E+14, Process_pct_ Processor_Time: 199.2160028, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 3245880, Process_Working Set: 2178584576, Process_Page Faults_sec: 1581.973312, Process_ID Process: 0, Process_IO Other Operations_sec: 175.0970461, Process_IO Data Operations_sec: 112.9980937, Process_Thread Count: 1610, Process_pct_ Privileged_Time: 197.6535244, Process_IO Data Bytes_sec: 10634.1206, Process_IO Read Bytes_sec: 5289.510766, Process_Priority Base: 0, Process_Handle Count: 57267, Network_I(Intel R _82574L_GNC)TCP_APS: 11180, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 208.596481, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 99.19832652, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 307.7948075, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 0.799986504, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 2.799952765, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 3.599939269, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 5, Network_I(Intel R _82574L_GNC) Packets Sent sec: 0.799986504, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 2.799952765, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 211521536, Memory Free & Zero Page List Bytes: 480645120, Memory Cache Bytes Peak: 279379968, Memory System Code Resident Bytes: 0, Memory Available Bytes: 1706655744, Memory Commit Limit: 5770170368, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 432.3927055, Memory Available KBytes: 1666656, Memory Pages sec: 0, Memory Cache Bytes: 77041664, Memory Pool Nonpaged Bytes: 111730688, Memory Page Faults sec: 1588.773197, Memory Transition Faults sec: 1215.379497, Memory System Cache Resident Bytes: 77041664, Memory Long-Term Average Standby Cache Lifetime (s): 14400, Memory Standby Cache Reserve Bytes: 685703168, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 202199040, Memory System Driver Resident Bytes: 1.76E+13, Memory Standby Cache Normal Priority Bytes: 338108416, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 61.32105942, Memory Free System Page Table Entries: 12261045, Memory Available MBytes: 1627, Memory Modified Page List Bytes: 33988608, Memory Cache Faults sec: 6.699886973, Memory Committed Bytes: 3538329600, Memory System Driver Total Bytes: 31330304, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 151220224, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 7610.181818, LogicalDisk(_Total) pct_ Idle Time: 99.98604719, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 81.80227985, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 2.199962887, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.099998313, LogicalDisk(_Total) Free Megabytes: 167419, LogicalDisk(_Total) Avg  Disk sec Write: 0.000195195, LogicalDisk(_Total) Disk Bytes sec: 16742.11756, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.014313803, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000429424, LogicalDisk(_Total) Avg  Disk Queue Length: 0.000429424, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 16742.11756, LogicalDisk(_Total) Disk Transfers sec: 2.199962887, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 7610.181818, LogicalDisk(_Total) pct_ Disk Write Time: 0.014314803, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000195195

[Assistant] attack


[User] date: 25-Apr-19, time: 9:21:05, motion_status: 1, light_status:  on

[Assistant] attack


[User] PID: 1668, MINFLT: 0, MAJFLT: 0, VSTEXT: 12, VSIZE: 9480, RSIZE: 292, VGROW: 0, RGROW: 0, MEM: 0, CMD: haveged

[Assistant] normal


[User] PID: 2788, MINFLT: 0, MAJFLT: 0, VSTEXT: 4, VSIZE: 857.6, RSIZE: 40660, VGROW: 0, RGROW: 0, MEM: 0.01, CMD: evolution-cale

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 41166, dst_ip: 52.59.177.21, dst_port: 80, proto: tcp, service: http, duration: 1.377059, src_bytes: 221, dst_bytes: 12183, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 489, dst_pkts: 11, dst_ip_bytes: 12763, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 4227, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: worer/u256:2, attack: 1

[Assistant] attack


[User] PID: 2498, MINFLT: 0, MAJFLT: 0, VSTEXT: 121, VSIZE: 22412, RSIZE: 400, VGROW: 0, RGROW: 0, MEM: 0, CMD: upstart-dbus-b

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:12, FC1_Read_Input_Register: 42684, FC2_Read_Discrete_Value: 24230, FC3_Read_Holding_Register: 47098, FC4_Read_Coil: 9496

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 33508, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 58, dst_ip: 192.168.1.193, dst_port: 58, proto: tcp, service: -, duration: 0.000405, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2437, MINFLT: 0, MAJFLT: 0, VSTEXT: 239, VSIZE: 78328, RSIZE: 1960, VGROW: 0, RGROW: 0, MEM: 0, CMD: window-stac-b

[Assistant] normal


[User] date: 31-Mar-19, time:    12:39:29   , fridge_temperature: 5.85, temp_condition: low

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:59, FC1_Read_Input_Register: 55474, FC2_Read_Discrete_Value: 19836, FC3_Read_Holding_Register: 52938, FC4_Read_Coil: 56615

[Assistant] normal


[User] src_ip: 192.168.1.79, src_port: 58011, dst_ip: 192.168.1.255, dst_port: 15600, proto: udp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 63, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 3875, TRUN: 0, TSLPI: 0, TSLPU: 0, POLI: 0, NICE: 0, PRI: 0, RTPR: 0, CPUNR: 0, Status: NE, EXC: 0, State: E, CPU: 0, CMD: <dpkg>

[Assistant] normal


[User] PID: 3678, MINFLT: 2072, MAJFLT: 0, VSTEXT: 148, VSIZE: 17948, RSIZE: 2608, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 32968, dst_ip: 192.168.1.152, dst_port: 80, proto: tcp, service: -, duration: 0.11134, src_bytes: 257, dst_bytes: 3440, conn_state: S3, missed_bytes: 257, src_pkts: 3, src_ip_bytes: 164, dst_pkts: 2, dst_ip_bytes: 112, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 1-Apr-19, time:  18:11:22 , latitude: 102.765451, longitude: 115.1670184

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 38106, dst_ip: 192.168.1.152, dst_port: 80, proto: tcp, service: -, duration: 14.46568, src_bytes: 6046, dst_bytes: 2452, conn_state: S3, missed_bytes: 6046, src_pkts: 5, src_ip_bytes: 304, dst_pkts: 7, dst_ip_bytes: 2824, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1400, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: irqbalance, attack: 0

[Assistant] normal


[User] date: 26-Apr-19, time:  14:28:00 , motion_status: 0, light_status:  off

[Assistant] attack


[User] src_ip: 192.168.1.195, src_port: 51519, dst_ip: 192.168.1.1, dst_port: 41952, proto: tcp, service: http, duration: 0.037475, src_bytes: 226, dst_bytes: 3978, conn_state: SF, missed_bytes: 0, src_pkts: 9, src_ip_bytes: 598, dst_pkts: 12, dst_ip_bytes: 4470, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 40418, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 4372, TRUN: 1, TSLPI: 0, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: R, CPU: 0.01, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.194, src_port: 80, dst_ip: 192.168.1.194, dst_port: 1668, proto: tcp, service: -, duration: 0.209235, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] Processor_DPC_Rate: 34, Processor_pct_ Idle_Time: 1.903284383, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.468794676, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 48.36398409, Processor_pct_ C1_Time: 1.903284383, Processor_pct_ Processor_Time: 96.32777504, Processor_C1_ransitions_sec: 267.2081205, Processor_pct_ DPC_Time: 1.328251582, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 47.97332186, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 2110.764146, Processor_Interrupts_sec: 5875.778565, Process_Pool_Paged Bytes: 23381144, Process_IO Read_Operations_sec: 5.800176267, Process_Working_Set_ Private: 2007539712, Process_Working_Set_Peak: 6172393472, Process_IO_Write Operations_sec: 1.200036469, Process_Page_File Bytes: 4120276992, Process_pct_ User_Time: 96.57170328, Process_Virtual_Bytes Peak: 1.66E+14, Process_Page_File Bytes Peak: 5378007040, Process_IO_Other_Bytes_sec: 2750.283581, Process_Private_Bytes: 4120276992, Process_IO_Write_Bytes_sec: 156.4047531, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.66E+14, Process_pct_ Processor_Time: 196.1124395, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2810736, Process_Working Set: 2084438016, Process_Page Faults_sec: 17960.24581, Process_ID Process: 0, Process_IO Other Operations_sec: 68.90209393, Process_IO Data Operations_sec: 7.000212736, Process_Thread Count: 1089, Process_pct_ Privileged_Time: 99.54073623, Process_IO Data Bytes_sec: 1327.440341, Process_IO Read Bytes_sec: 1171.035588, Process_Priority Base: 0, Process_Handle Count: 40432, Network_I(Intel R _82574L_GNC)TCP_APS: 5166, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4909.049186, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 239.6072817, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5148.656468, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 4.40013372, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 8.700264401, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 13.10039812, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 5, Network_I(Intel R _82574L_GNC) Packets Sent sec: 4.40013372, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 8.700264401, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 106500096, Memory Free & Zero Page List Bytes: 2105344, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 282488832, Memory Commit Limit: 8473018368, Memory Transition Pages RePurposed sec: 7174.118021, Memory Pages Output sec: 3663.411331, Memory Page Reads sec: 2354.471552, Memory Demand Zero Faults sec: 4129.825505, Memory Available KBytes: 275868, Memory Pages sec: 13655.51499, Memory Cache Bytes: 983040, Memory Pool Nonpaged Bytes: 101924864, Memory Page Faults sec: 18320.35676, Memory Transition Faults sec: 6219.289004, Memory System Cache Resident Bytes: 983040, Memory Long-Term Average Standby Cache Lifetime (s): 614, Memory Standby Cache Reserve Bytes: 5365760, Memory Page Writes sec: 260.6079199, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 152621056, Memory System Driver Resident Bytes: 1.76E+13, Memory Standby Cache Normal Priority Bytes: 122392576, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 59.48289862, Memory Free System Page Table Entries: 12192331, Memory Available MBytes: 269, Memory Modified Page List Bytes: 524288, Memory Cache Faults sec: 8.400255284, Memory Committed Bytes: 5039996928, Memory System Driver Total Bytes: 18223104, Memory Pages Input sec: 9992.10366, Memory Pool Paged Resident Bytes: 24662016, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 57262.79832, LogicalDisk(_Total) pct_ Idle Time: 76.71720215, LogicalDisk(_Total) Disk Reads sec: 2329.870805, LogicalDisk(_Total) pct_ Free Space: 81.29217299, LogicalDisk(_Total) Disk Read Bytes sec: 41198820.03, LogicalDisk(_Total) Avg  Disk sec Read: 0.001045526, LogicalDisk(_Total) Disk Writes sec: 262.3079715, LogicalDisk(_Total) Current Disk Queue Length: 6, LogicalDisk(_Total) Split IO Sec: 0.300009117, LogicalDisk(_Total) Free Megabytes: 166375, LogicalDisk(_Total) Avg  Disk sec Write: 0.000670972, LogicalDisk(_Total) Disk Bytes sec: 56219308.5, LogicalDisk(_Total) Avg  Disk Read Queue Length: 2.43609969, LogicalDisk(_Total) pct_ Disk Time: 87.07041181, LogicalDisk(_Total) Avg  Disk Bytes Read: 17682.8775, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.176012684, LogicalDisk(_Total) Avg  Disk Queue Length: 2.612112374, LogicalDisk(_Total) pct_ Disk Read Time: 81.20332368, LogicalDisk(_Total) Disk Write Bytes sec: 15020488.47, LogicalDisk(_Total) Disk Transfers sec: 2592.178776, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 21688.05216, LogicalDisk(_Total) pct_ Disk Write Time: 5.867089134, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.001007624

[Assistant] normal


[User] Processor(_Total) DPC Rate: 0, Processor(_Total) pct_ Idle Time: 83.95833333, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 14.6875, Processor(_Total) pct_ C1 Time: 80, Processor(_Total) pct_ Processor Time: 16.04166667, Processor(_Total) C1 Transitions sec: 57.73371592, Processor(_Total) pct_ DPC Time: 0.3125, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 1.354166667, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 7.400049038, Processor(_Total) Interrupts sec: 88.73392134, Process(_Total) Pool Paged Bytes: 8560248, Process(_Total) IO Read Operations sec: 10.60007024, Process(_Total) Working Set - Private: 859938816, Process(_Total) Working Set Peak: 2613092352, Process(_Total) IO Write Operations sec: 9.86673205, Process(_Total) Page File Bytes: 1552904192, Process(_Total) pct_ User Time: 14.6875, Process(_Total) Virtual Bytes Peak: 8255266816, Process(_Total) Page File Bytes Peak: 1877049344, Process(_Total) IO Other Bytes sec: 6734.444627, Process(_Total) Private Bytes: 1552904192, Process(_Total) IO Write Bytes sec: 7144.980681, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 7038963712, Process(_Total) pct_ Processor Time: 99.6875, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1075160, Process(_Total) Working Set: 966586368, Process(_Total) Page Faults sec: 309.7353858, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 220.2681263, Process(_Total) IO Data Operations sec: 20.46680229, Process(_Total) Thread Count: 596, Process(_Total) pct_ Privileged Time: 85, Process(_Total) IO Data Bytes sec: 9929.932469, Process(_Total) IO Read Bytes sec: 2784.951788, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 14419, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 2540.2835, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 152.1343415, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 2692.417842, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 2.533350121, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 4.600030483, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 7.133380604, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 2.533350121, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 4.600030483, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 95977472, Memory Free & Zero Page List Bytes: 30732288, Memory Cache Bytes Peak: 25575424, Memory System Code Resident Bytes: 1191936, Memory Available Bytes: 175751168, Memory Commit Limit: 2641346560, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0.133334217, Memory Demand Zero Faults sec: 308.8687134, Memory Available KBytes: 171632, Memory Pages sec: 0.133334217, Memory Cache Bytes: 1880064, Memory Pool Nonpaged Bytes: 59068416, Memory Page Faults sec: 313.0687413, Memory Transition Faults sec: 4.600030483, Memory System Cache Resident Bytes: 1880064, Memory Standby Cache Reserve Bytes: 10215424, Memory Page Writes sec: 0, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 84439040, Memory System Driver Resident Bytes: 1908736, Memory Standby Cache Normal Priority Bytes: 50364416, Memory Pool Paged Allocs: 63344, Memory Pool Nonpaged Allocs: 59381, Memory pct_ Committed Bytes In Use: 77.64274416, Memory Free System Page Table Entries: 33557321, Memory Available MBytes: 167, Memory Modified Page List Bytes: 139264, Memory Cache Faults sec: 0.400002651, Memory Committed Bytes: 2050813952, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 0.133334217, Memory Pool Paged Resident Bytes: 27922432, Memory Write Copies sec: 0

[Assistant] attack


[User] date: 28-Apr-19, time:  07:46:29 , FC1_Read_Input_Register: 64948, FC2_Read_Discrete_Value: 44986, FC3_Read_Holding_Register: 41383, FC4_Read_Coil: 62321

[Assistant] attack


[User] PID: 2501, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0.02, CMD: ibus-daemon

[Assistant] normal


[User] PID: 2460, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: bamfdaemon

[Assistant] normal


[User] PID: 2798, TRUN: 0, TSLPI: 5, TSLPU: 0, POLI: norm, NICE: 19, PRI: 139, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: tracker-miner-

[Assistant] normal


[User] date: 28-Apr-19, time:  10:13:11 , current_temperature: 26.136754, thermostat_status: 1

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 35641, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000072, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 2872, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: evolution-cale, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 54771, dst_ip: 192.168.1.49, dst_port: 3998, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 46754, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.875311, src_bytes: 552, dst_bytes: 334, conn_state: SF, missed_bytes: 0, src_pkts: 12, src_ip_bytes: 888, dst_pkts: 4, dst_ip_bytes: 446, dns_query: detectportal.firefox.com.hub, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 34296, dst_ip: 192.168.1.152, dst_port: 10502, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 47558, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 0.011672, src_bytes: 155, dst_bytes: 978, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 375, dst_pkts: 4, dst_ip_bytes: 1150, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1854, TRUN: 0, TSLPI: 2, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: 0, EXC: 0, State: S, CPU: 0, CMD: vmtoolsd

[Assistant] attack


[User] PID: 3896, RDDSK: 0, WRDSK: 8, WCANCL: 0, DSK: 0.09, CMD: atop, attack: 0

[Assistant] normal


[User] PID: 2887, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: evolution-cale, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 38199, dst_ip: 192.168.1.133, dst_port: 1059, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:57, temperature: 23.04875073, pressure: 0.928578331, humidity: 34.67836297

[Assistant] normal


[User] date: 28-Apr-19, time:  09:47:34 , latitude: 62.89384624, longitude: 73.60220173

[Assistant] attack


[User] PID: 3677, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] PID: 11699, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] PID: 3305, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: atop, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49517, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000143, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 1-Apr-19, time:  23:48:50 , current_temperature: 27.61584646, thermostat_status: 1

[Assistant] normal


[User] Processor(_Total) DPC Rate: 30, Processor(_Total) pct_ Idle Time: 72.39583333, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.104166667, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 2.083333333, Processor(_Total) pct_ C1 Time: 66.66666667, Processor(_Total) pct_ Processor Time: 27.60416667, Processor(_Total) C1 Transitions sec: 3574.948753, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 25.52083333, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 3594.28217, Processor(_Total) Interrupts sec: 4804.087388, Process(_Total) Pool Paged Bytes: 7826136, Process(_Total) IO Read Operations sec: 4.933354613, Process(_Total) Working Set - Private: 721018880, Process(_Total) Working Set Peak: 2054631424, Process(_Total) IO Write Operations sec: 1.866674718, Process(_Total) Page File Bytes: 1909485568, Process(_Total) pct_ User Time: 2.083333333, Process(_Total) Virtual Bytes Peak: 7968575488, Process(_Total) Page File Bytes Peak: 2304520192, Process(_Total) IO Other Bytes sec: 2363.676862, Process(_Total) Private Bytes: 1909485568, Process(_Total) IO Write Bytes sec: 6050.026096, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6801158144, Process(_Total) pct_ Processor Time: 99.89583333, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1046360, Process(_Total) Working Set: 777003008, Process(_Total) Page Faults sec: 6655.562041, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 106.4004589, Process(_Total) IO Data Operations sec: 6.800029331, Process(_Total) Thread Count: 564, Process(_Total) pct_ Privileged Time: 97.8125, Process(_Total) IO Data Bytes sec: 6398.160931, Process(_Total) IO Read Bytes sec: 348.134835, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13915, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 192.9341655, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 41.26684466, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 234.2010102, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 0.46666868, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 1.333339084, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 1.800007764, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 0.46666868, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 1.333339084, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 97959936, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 80883712, Memory System Code Resident Bytes: 729088, Memory Available Bytes: 34766848, Memory Commit Limit: 2550685696, Memory Transition Pages RePurposed sec: 7849.36719, Memory Pages Output sec: 3456.214908, Memory Page Reads sec: 3351.814457, Memory Demand Zero Faults sec: 327.6014131, Memory Available KBytes: 33952, Memory Pages sec: 12304.25307, Memory Cache Bytes: 516096, Memory Pool Nonpaged Bytes: 56733696, Memory Page Faults sec: 6849.629545, Memory Transition Faults sec: 3171.747014, Memory System Cache Resident Bytes: 516096, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 294.9346055, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 18182144, Memory System Driver Resident Bytes: 1212416, Memory Standby Cache Normal Priority Bytes: 16584704, Memory Pool Paged Allocs: 62389, Memory Pool Nonpaged Allocs: 53578, Memory pct_ Committed Bytes In Use: 88.95645918, Memory Free System Page Table Entries: 33563833, Memory Available MBytes: 33, Memory Modified Page List Bytes: 2211840, Memory Cache Faults sec: 1.600006901, Memory Committed Bytes: 2268999680, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 8848.038165, Memory Pool Paged Resident Bytes: 12070912, Memory Write Copies sec: 0

[Assistant] normal


[User] date: 2-Apr-19, time:    04:05:49   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 50592, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000032, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49770, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.00059, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.190, src_port: 30759, dst_ip: 23.74.25.32, dst_port: 53, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 80, dst_pkts: 0, dst_ip_bytes: 0, dns_query: 67.49.7.96.in-addr.arpa, dns_qclass: 1, dns_qtype: 12, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 62948, dst_ip: 192.168.1.250, dst_port: 9002, proto: tcp, service: -, duration: 0.027789, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2809, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: vmtoolsd

[Assistant] normal


[User] date: 2-Apr-19, time:    04:04:05   , fridge_temperature: 2, temp_condition: low

[Assistant] normal


[User] date: 25-Apr-19, time: 16:31:47, temperature: 38.13420551, pressure: 2.428750502, humidity: 8.203712835

[Assistant] attack


[User] PID: 1368, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vmtoolsd, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.79, src_port: 58621, dst_ip: 192.168.1.255, dst_port: 15600, proto: udp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 63, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 1-Apr-19, time:   15:33:23   , fridge_temperature: 5.45, temp_condition: low

[Assistant] normal


[User] date: 1-Apr-19, time:   21:03:04   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:26, FC1_Read_Input_Register: 6559, FC2_Read_Discrete_Value: 53963, FC3_Read_Holding_Register: 54905, FC4_Read_Coil: 34570

[Assistant] normal


[User] date: 28-Apr-19, time:  16:46:57 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] PID: 1442, MINFLT: 0, MAJFLT: 0, VSTEXT: 2219, VSIZE: 772.2, RSIZE: 131.8, VGROW: 0, RGROW: 0, MEM: 0.04, CMD: Xorg

[Assistant] normal


[User] PID: 10431, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vsftpd, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 56784, dst_ip: 151.101.30.49, dst_port: 443, proto: tcp, service: ssl, duration: 181.308343, src_bytes: 3537, dst_bytes: 12193, conn_state: RSTR, missed_bytes: 0, src_pkts: 20, src_ip_bytes: 4585, dst_pkts: 22, dst_ip_bytes: 13333, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 43770, dst_ip: 192.168.1.184, dst_port: 443, proto: tcp, service: -, duration: 60.591321, src_bytes: 0, dst_bytes: 0, conn_state: S3, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 2, dst_ip_bytes: 112, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] Processor(_Total) DPC Rate: 84, Processor(_Total) pct_ Idle Time: 69.79166667, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 2.1875, Processor(_Total) pct_ C1 Time: 66.66666667, Processor(_Total) pct_ Processor Time: 30.20833333, Processor(_Total) C1 Transitions sec: 3625.246742, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 28.02083333, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 3673.180693, Processor(_Total) Interrupts sec: 4955.997233, Process(_Total) Pool Paged Bytes: 7825472, Process(_Total) IO Read Operations sec: 2.000025787, Process(_Total) Working Set - Private: 747642880, Process(_Total) Working Set Peak: 2054631424, Process(_Total) IO Write Operations sec: 2.600033523, Process(_Total) Page File Bytes: 1890254848, Process(_Total) pct_ User Time: 2.1875, Process(_Total) Virtual Bytes Peak: 7949701120, Process(_Total) Page File Bytes Peak: 2252451840, Process(_Total) IO Other Bytes sec: 12808.0318, Process(_Total) Private Bytes: 1890254848, Process(_Total) IO Write Bytes sec: 9097.050625, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6798893056, Process(_Total) pct_ Processor Time: 100, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1048864, Process(_Total) Working Set: 798732288, Process(_Total) Page Faults sec: 6481.550235, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 661.8085329, Process(_Total) IO Data Operations sec: 4.60005931, Process(_Total) Thread Count: 546, Process(_Total) pct_ Privileged Time: 97.8125, Process(_Total) IO Data Bytes sec: 9335.320363, Process(_Total) IO Read Bytes sec: 238.2697388, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13837, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 89.46782021, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 9.333453673, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 98.80127388, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 0.133335052, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 1.266682998, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 1.400018051, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 0.133335052, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 1.266682998, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 97517568, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 80883712, Memory System Code Resident Bytes: 782336, Memory Available Bytes: 15523840, Memory Commit Limit: 2517131264, Memory Transition Pages RePurposed sec: 6214.680128, Memory Pages Output sec: 5839.608625, Memory Page Reads sec: 3075.906325, Memory Demand Zero Faults sec: 1521.019611, Memory Available KBytes: 15160, Memory Pages sec: 12998.10092, Memory Cache Bytes: 397312, Memory Pool Nonpaged Bytes: 56705024, Memory Page Faults sec: 6776.620707, Memory Transition Faults sec: 2180.961453, Memory System Cache Resident Bytes: 397312, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 666.0752546, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 12759040, Memory System Driver Resident Bytes: 1142784, Memory Standby Cache Normal Priority Bytes: 2764800, Memory Pool Paged Allocs: 63162, Memory Pool Nonpaged Allocs: 53913, Memory pct_ Committed Bytes In Use: 89.33305562, Memory Free System Page Table Entries: 33563833, Memory Available MBytes: 14, Memory Modified Page List Bytes: 57344, Memory Cache Faults sec: 0.933345367, Memory Committed Bytes: 2248630272, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 7158.492297, Memory Pool Paged Resident Bytes: 10809344, Memory Write Copies sec: 0

[Assistant] normal


[User] date: 2-Apr-19, time:  04:03:43 , current_temperature: 28.86135766, thermostat_status: 1

[Assistant] normal


[User] PID: 1401, MINFLT: 3, MAJFLT: 0, VSTEXT: 36, VSIZE: 19296, RSIZE: 824, VGROW: 0, RGROW: 0, MEM: 0, CMD: irqbalance

[Assistant] attack


[User] src_ip: 192.168.1.33, src_port: 45975, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 60, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:    04:01:35   , fridge_temperature: 8.85, temp_condition: high

[Assistant] normal


[User] PID: 2784, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: goa-daemon

[Assistant] normal


[User] date: 31-Mar-19, time:    12:42:17   , door_state: open, sphone_signal: true

[Assistant] normal


[User] date: 1-Apr-19, time:   21:00:29   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 48128, dst_ip: 192.168.1.184, dst_port: 443, proto: tcp, service: -, duration: 0.009542, src_bytes: 0, dst_bytes: 0, conn_state: SHR, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 1, dst_ip_bytes: 52, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack