[User] src_ip: 172.17.0.7, src_port: 43295, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000605, src_bytes: 0, dst_bytes: 212, conn_state: SHR, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 2, dst_ip_bytes: 268, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 1899, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: Xorg, attack: 1

[Assistant] attack


[User] PID: 1400, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: irqbalance, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49759, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.000872, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1133, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: polkitd

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:18, latitude: 3.965348671, longitude: 12.82067405

[Assistant] normal


[User] Processor(_Total) DPC Rate: 17, Processor(_Total) pct_ Idle Time: 72.70833333, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.104166667, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 0.833333333, Processor(_Total) pct_ C1 Time: 73.33333333, Processor(_Total) pct_ Processor Time: 27.29166667, Processor(_Total) C1 Transitions sec: 3796.541355, Processor(_Total) pct_ DPC Time: 0.104166667, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 26.45833333, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 3679.545217, Processor(_Total) Interrupts sec: 4951.43657, Process(_Total) Pool Paged Bytes: 7699272, Process(_Total) IO Read Operations sec: 3.999867978, Process(_Total) Working Set - Private: 780079104, Process(_Total) Working Set Peak: 2041237504, Process(_Total) IO Write Operations sec: 3.999867978, Process(_Total) Page File Bytes: 2112122880, Process(_Total) pct_ User Time: 0.833333333, Process(_Total) Virtual Bytes Peak: 7982997504, Process(_Total) Page File Bytes Peak: 2732740608, Process(_Total) IO Other Bytes sec: 3062.165595, Process(_Total) Private Bytes: 2112122880, Process(_Total) IO Write Bytes sec: 2061.398627, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6731276288, Process(_Total) pct_ Processor Time: 99.79166667, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1043504, Process(_Total) Working Set: 839151616, Process(_Total) Page Faults sec: 4789.04193, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 129.6623869, Process(_Total) IO Data Operations sec: 7.999735955, Process(_Total) Thread Count: 545, Process(_Total) pct_ Privileged Time: 98.95833333, Process(_Total) IO Data Bytes sec: 3006.700759, Process(_Total) IO Read Bytes sec: 945.3021321, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13633, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 598.6469073, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 596.7803023, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 1195.42721, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 2.133262921, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 1.79994059, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 3.933203511, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 2.133262921, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 1.79994059, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 92594176, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 745472, Memory Available Bytes: 581632, Memory Commit Limit: 2918703104, Memory Transition Pages RePurposed sec: 5507.684876, Memory Pages Output sec: 4055.799465, Memory Page Reads sec: 2988.768017, Memory Demand Zero Faults sec: 391.7204039, Memory Available KBytes: 568, Memory Pages sec: 10356.19151, Memory Cache Bytes: 393216, Memory Pool Nonpaged Bytes: 77262848, Memory Page Faults sec: 4936.837051, Memory Transition Faults sec: 1558.2819, Memory System Cache Resident Bytes: 393216, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 788.5739718, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 348160, Memory System Driver Resident Bytes: 1495040, Memory Standby Cache Normal Priority Bytes: 233472, Memory Pool Paged Allocs: 58823, Memory Pool Nonpaged Allocs: 57138, Memory pct_ Committed Bytes In Use: 84.96184256, Memory Free System Page Table Entries: 33562140, Memory Available MBytes: 0, Memory Modified Page List Bytes: 40960, Memory Cache Faults sec: 1.933269523, Memory Committed Bytes: 2479783936, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 6300.392045, Memory Pool Paged Resident Bytes: 12419072, Memory Write Copies sec: 0.266657865

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 47, dst_ip: 192.168.1.190, dst_port: 47, proto: tcp, service: -, duration: 0.000016, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.37, src_port: 38159, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 184, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3896, RDDSK: 0, WRDSK: 8, WCANCL: 0, DSK: 0.05, CMD: atop, attack: 0

[Assistant] normal


[User] date: 31-Mar-19, time: 12:42:44, temperature: 38.9025328, pressure: 1.480440679, humidity: 76.95388301

[Assistant] normal


[User] date: 1-Apr-19, time:  17:09:26 , latitude: 70.49082179, longitude: 82.5335116

[Assistant] normal


[User] date: 28-Apr-19, time: 4:27:11, temperature: 32.69375018, pressure: 1.61627293, humidity: 13.22881769

[Assistant] attack


[User] src_ip: 172.17.0.8, src_port: 33431, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000773, src_bytes: 0, dst_bytes: 178, conn_state: SHR, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 2, dst_ip_bytes: 234, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:39:15, motion_status: 0, light_status:  off

[Assistant] normal


[User] PID: 3677, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] date: 31-Mar-19, time:    12:43:56   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] PID: 4075, RDDSK: 0, WRDSK: 4, WCANCL: 0, DSK: 0.06, CMD: apache2, attack: 0

[Assistant] normal


[User] date: 1-Apr-19, time:  18:05:03 , latitude: 101.0282879, longitude: 112.0574238

[Assistant] normal


[User] PID: 3793, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: drone, attack: 0

[Assistant] normal


[User] date: 2-Apr-19, time:    04:07:03   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 80.89379026, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 16.64038787, Processor_pct_ C1_Time: 80.89379026, Processor_pct_ Processor_Time: 17.57929949, Processor_C1_ransitions_sec: 152.5979766, Processor_pct_ DPC_Time: 0.078123887, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 0.937486641, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 27.19963933, Processor_Interrupts_sec: 503.4933237, Process_Pool_Paged Bytes: 19905624, Process_IO Read_Operations_sec: 2.199970828, Process_Working_Set_ Private: 1168998400, Process_Working_Set_Peak: 4819668992, Process_IO_Write Operations_sec: 1.299982762, Process_Page_File Bytes: 2084216832, Process_pct_ User_Time: 33.28077575, Process_Virtual_Bytes Peak: 1.44E+14, Process_Page_File Bytes Peak: 3110408192, Process_IO_Other_Bytes_sec: 4070.446026, Process_Private_Bytes: 2084216832, Process_IO_Write_Bytes_sec: 2204.37077, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.44E+14, Process_pct_ Processor_Time: 199.8409023, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2052632, Process_Working Set: 1678790656, Process_Page Faults_sec: 551.9926806, Process_ID Process: 0, Process_IO Other Operations_sec: 66.49911822, Process_IO Data Operations_sec: 3.499953591, Process_Thread Count: 901, Process_pct_ Privileged_Time: 166.5601265, Process_IO Data Bytes_sec: 2450.367508, Process_IO Read Bytes_sec: 245.9967381, Process_Priority Base: 0, Process_Handle Count: 35752, Network_I(Intel R _82574L_GNC)TCP_APS: 5376, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4892.13513, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 289.3961626, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5181.531293, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 5.299929723, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 7.699897899, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 12.99982762, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 2, Network_I(Intel R _82574L_GNC) Packets Sent sec: 5.299929723, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 7.699897899, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 107298816, Memory Free & Zero Page List Bytes: 20389888, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 923185152, Memory Commit Limit: 8473149440, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 691.6908282, Memory Available KBytes: 901548, Memory Pages sec: 0, Memory Cache Bytes: 11448320, Memory Pool Nonpaged Bytes: 87728128, Memory Page Faults sec: 558.3925957, Memory Transition Faults sec: 11.89984221, Memory System Cache Resident Bytes: 11448320, Memory Long-Term Average Standby Cache Lifetime (s): 19, Memory Standby Cache Reserve Bytes: 649609216, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 162201600, Memory System Driver Resident Bytes: 4173824, Memory Standby Cache Normal Priority Bytes: 90984448, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 34.42919018, Memory Free System Page Table Entries: 12209879, Memory Available MBytes: 880, Memory Modified Page List Bytes: 19341312, Memory Cache Faults sec: 6.399915137, Memory Committed Bytes: 2917236736, Memory System Driver Total Bytes: 18182144, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 69533696, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 9728, LogicalDisk(_Total) pct_ Idle Time: 99.97932529, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 81.32637555, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 0.799989392, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.099998674, LogicalDisk(_Total) Free Megabytes: 166445, LogicalDisk(_Total) Avg  Disk sec Write: 0.000769362, LogicalDisk(_Total) Disk Bytes sec: 7782.296807, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.020516708, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000615481, LogicalDisk(_Total) Avg  Disk Queue Length: 0.000615481, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 7782.296807, LogicalDisk(_Total) Disk Transfers sec: 0.799989392, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 9728, LogicalDisk(_Total) pct_ Disk Write Time: 0.020515708, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000769362

[Assistant] normal


[User] PID: 1026, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: upstart-socet, attack: 0

[Assistant] normal


[User] date: 25-Apr-19, time: 9:41:18, motion_status: 0, light_status:  off

[Assistant] attack


[User] PID: 3790, MINFLT: 0, MAJFLT: 0, VSTEXT: 2132, VSIZE: 2.4, RSIZE: 25172, VGROW: 0, RGROW: 0, MEM: 0.01, CMD: ostinato

[Assistant] normal


[User] src_ip: 192.168.1.33, src_port: 35845, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 184, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1442, MINFLT: 0, MAJFLT: 0, VSTEXT: 2219, VSIZE: 772.2, RSIZE: 169.8, VGROW: 0, RGROW: 0, MEM: 0.05, CMD: Xorg

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:01, motion_status: 1, light_status:  on

[Assistant] normal


[User] date: 27-Apr-19, time:  05:13:16 , fridge_temperature: 5.55, temp_condition: low

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:14, FC1_Read_Input_Register: 44785, FC2_Read_Discrete_Value: 247, FC3_Read_Holding_Register: 3023, FC4_Read_Coil: 63289

[Assistant] normal


[User] PID: 7257, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <systemd-udev>, attack: 0

[Assistant] normal


[User] PID: 2870, MINFLT: 0, MAJFLT: 0, VSTEXT: 71, VSIZE: 195.6, RSIZE: 1208, VGROW: 0, RGROW: 340, MEM: 0, CMD: gvfs-mtp-volum

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 57882, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 0.167522, src_bytes: 284, dst_bytes: 524, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 504, dst_pkts: 4, dst_ip_bytes: 696, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:  04:06:20 , current_temperature: 32.01230996, thermostat_status: 1

[Assistant] normal


[User] date: 2-Apr-19, time:    04:01:38   , fridge_temperature: 4, temp_condition: low

[Assistant] normal


[User] Processor_DPC_Rate: 9, Processor_pct_ Idle_Time: 69.78562996, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.07824978, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 15.0239578, Processor_pct_ C1_Time: 69.78562996, Processor_pct_ Processor_Time: 18.22897966, Processor_C1_ransitions_sec: 748.9944949, Processor_pct_ DPC_Time: 0.15649956, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 3.208240989, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 349.1568346, Processor_Interrupts_sec: 1272.429268, Process_Pool_Paged Bytes: 16183120, Process_IO Read_Operations_sec: 57.19120842, Process_Working_Set_ Private: 731811840, Process_Working_Set_Peak: 4943192064, Process_IO_Write Operations_sec: 26.74264912, Process_Page_File Bytes: 1826422784, Process_pct_ User_Time: 30.04791561, Process_Virtual_Bytes Peak: 1.23E+14, Process_Page_File Bytes Peak: 4267552768, Process_IO_Other_Bytes_sec: 117129.9987, Process_Private_Bytes: 1826422784, Process_IO_Write_Bytes_sec: 5091437.113, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.23E+14, Process_pct_ Processor_Time: 199.5369396, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 1827936, Process_Working Set: 1526898688, Process_Page Faults_sec: 6293.53692, Process_ID Process: 0, Process_IO Other Operations_sec: 1798.368034, Process_IO Data Operations_sec: 83.93385754, Process_Thread Count: 853, Process_pct_ Privileged_Time: 169.489024, Process_IO Data Bytes_sec: 17201927.4, Process_IO Read Bytes_sec: 12110490.28, Process_Priority Base: 0, Process_Handle Count: 32893, Network_I(Intel R _82574L_GNC)TCP_APS: 0, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 2135.305381, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 146.032893, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 2281.338274, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 2.704312832, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 4.707507523, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 7.411820356, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 0, Network_I(Intel R _82574L_GNC) Packets Sent sec: 2.704312832, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 4.707507523, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 353472512, Memory Free & Zero Page List Bytes: 1122304, Memory Cache Bytes Peak: 815652864, Memory System Code Resident Bytes: 2437120, Memory Available Bytes: 297611264, Memory Commit Limit: 3354243072, Memory Transition Pages RePurposed sec: 5072.489596, Memory Pages Output sec: 0, Memory Page Reads sec: 139.5225102, Memory Demand Zero Faults sec: 5792.638087, Memory Available KBytes: 290636, Memory Pages sec: 2265.112397, Memory Cache Bytes: 71647232, Memory Pool Nonpaged Bytes: 87650304, Memory Page Faults sec: 9486.428937, Memory Transition Faults sec: 690.2007307, Memory System Cache Resident Bytes: 0, Memory Long-Term Average Standby Cache Lifetime (s): 96, Memory Standby Cache Reserve Bytes: 79716352, Memory Page Writes sec: 0, Memory System Code Total Bytes: 3825664, Memory Standby Cache Core Bytes: 119001088, Memory System Driver Resident Bytes: 6434816, Memory Standby Cache Normal Priority Bytes: 97771520, Memory Pool Paged Allocs: 197983, Memory Pool Nonpaged Allocs: 124232, Memory pct_ Committed Bytes In Use: 79.35663023, Memory Free System Page Table Entries: 12205248, Memory Available MBytes: 283, Memory Modified Page List Bytes: 16596992, Memory Cache Faults sec: 3048.161201, Memory Committed Bytes: 2661814272, Memory System Driver Total Bytes: 17039360, Memory Pages Input sec: 2265.112397, Memory Pool Paged Resident Bytes: 128421888, Memory Write Copies sec: 0.100159735, LogicalDisk(_Total) Avg  Disk Bytes Write: 100412.9737, LogicalDisk(_Total) pct_ Idle Time: 38.48633886, LogicalDisk(_Total) Disk Reads sec: 131.4095717, LogicalDisk(_Total) pct_ Free Space: 85.0965183, LogicalDisk(_Total) Disk Read Bytes sec: 9161285.599, LogicalDisk(_Total) Avg  Disk sec Read: 0.001305039, LogicalDisk(_Total) Disk Writes sec: 57.19120842, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 4.607347789, LogicalDisk(_Total) Free Megabytes: 173996, LogicalDisk(_Total) Avg  Disk sec Write: 0.008278147, LogicalDisk(_Total) Disk Bytes sec: 14904024.91, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.171494602, LogicalDisk(_Total) pct_ Disk Time: 64.4931764, LogicalDisk(_Total) Avg  Disk Bytes Read: 69715.5122, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.473437162, LogicalDisk(_Total) Avg  Disk Queue Length: 0.644931764, LogicalDisk(_Total) pct_ Disk Read Time: 17.14946022, LogicalDisk(_Total) Disk Write Bytes sec: 5742739.309, LogicalDisk(_Total) Disk Transfers sec: 188.6007801, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 79024.19543, LogicalDisk(_Total) pct_ Disk Write Time: 47.34371618, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.003419561

[Assistant] normal


[User] date: 31-Mar-19, time: 12:40:38, temperature: 22.80167695, pressure: 1.741141085, humidity: 73.39055063

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 54682, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.014698, src_bytes: 168, dst_bytes: 424, conn_state: SF, missed_bytes: 0, src_pkts: 4, src_ip_bytes: 280, dst_pkts: 2, dst_ip_bytes: 480, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 1-Apr-19, time:  15:21:42 , latitude: 14.64549903, longitude: 22.53331519

[Assistant] normal


[User] src_ip: 172.17.0.5, src_port: 52849, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.00048, src_bytes: 0, dst_bytes: 212, conn_state: SHR, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 2, dst_ip_bytes: 268, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 2824, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: atop

[Assistant] attack


[User] date: 29-Apr-19, time: 0:46:51, fridge_temperature: 4, temp_condition: low

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:01, temperature: 24.43877974, pressure: 1.185509259, humidity: 45.66497733

[Assistant] normal


[User] src_ip: 192.168.1.194, src_port: 80, dst_ip: 192.168.1.194, dst_port: 1319, proto: tcp, service: -, duration: 0.246494, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 71, dst_ip: 192.168.1.190, dst_port: 71, proto: tcp, service: -, duration: 0.000001, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2122, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 43436, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000067, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 3112, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: Web-ContentExtensions, attack: 1

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:46, motion_status: 0, light_status:  off

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 45407, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.011294, src_bytes: 168, dst_bytes: 430, conn_state: SF, missed_bytes: 0, src_pkts: 4, src_ip_bytes: 280, dst_pkts: 2, dst_ip_bytes: 486, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3790, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: ostinato, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.79, src_port: 43087, dst_ip: 192.168.1.255, dst_port: 15600, proto: udp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 63, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 57804, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.002892, src_bytes: 84, dst_bytes: 436, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 140, dst_pkts: 2, dst_ip_bytes: 492, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:    04:05:54   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:10, motion_status: 0, light_status:  off

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 46100, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.015914, src_bytes: 84, dst_bytes: 424, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 140, dst_pkts: 2, dst_ip_bytes: 480, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3675, MINFLT: 2076, MAJFLT: 0, VSTEXT: 148, VSIZE: 17948, RSIZE: 2604, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] date: 26-Apr-19, time:  15:43:29 , latitude: 66.13680222, longitude: 75.26286607

[Assistant] attack


[User] date: 28-Apr-19, time:  04:42:01 , motion_status: 0, light_status:  off

[Assistant] attack


[User] date: 31-Mar-19, time:    12:41:26   , fridge_temperature: 10.25, temp_condition: high

[Assistant] normal


[User] PID: 1457, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: 0, EXC: 0, State: S, CPU: 0, CMD: Xorg

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 45312, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.6, src_port: 5353, dst_ip: 224.0.0.251, dst_port: 5353, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 89, dst_pkts: 0, dst_ip_bytes: 0, dns_query: _googlecast._tcp.local, dns_qclass: 1, dns_qtype: 12, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 1452, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: accounts-daemo

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 37470, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 70.056964, src_bytes: 3274, dst_bytes: 3671, conn_state: RSTO, missed_bytes: 0, src_pkts: 7, src_ip_bytes: 3574, dst_pkts: 5, dst_ip_bytes: 3883, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 4374, MINFLT: 1676, MAJFLT: 0, VSTEXT: 148, VSIZE: 17948, RSIZE: 2480, VGROW: 4, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] PID: 6985, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <systemd-udev>, attack: 0

[Assistant] normal


[User] Processor(_Total) DPC Rate: 0, Processor(_Total) pct_ Idle Time: 99.79166667, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 0.208333333, Processor(_Total) pct_ C1 Time: 93.33333333, Processor(_Total) pct_ Processor Time: 0.208333333, Processor(_Total) C1 Transitions sec: 64.92672379, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 0, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 1.133217972, Processor(_Total) Interrupts sec: 66.85986033, Process(_Total) Pool Paged Bytes: 4945320, Process(_Total) IO Read Operations sec: 1.466517375, Process(_Total) Working Set - Private: 161685504, Process(_Total) Working Set Peak: 926412800, Process(_Total) IO Write Operations sec: 0.93323833, Process(_Total) Page File Bytes: 526508032, Process(_Total) pct_ User Time: 0.208333333, Process(_Total) Virtual Bytes Peak: 4130967552, Process(_Total) Page File Bytes Peak: 748625920, Process(_Total) IO Other Bytes sec: 965.3017323, Process(_Total) Private Bytes: 526508032, Process(_Total) IO Write Bytes sec: 4492.742639, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 3336089600, Process(_Total) pct_ Processor Time: 100, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 704416, Process(_Total) Working Set: 445054976, Process(_Total) Page Faults sec: 14.33187435, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 52.26134646, Process(_Total) IO Data Operations sec: 2.399755705, Process(_Total) Thread Count: 430, Process(_Total) pct_ Privileged Time: 99.79166667, Process(_Total) IO Data Bytes sec: 4637.12794, Process(_Total) IO Read Bytes sec: 144.3853016, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 10937, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 0, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 16.19835101, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 16.19835101, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 0.066659881, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 0, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 0.066659881, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 0.066659881, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 0, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 98000896, Memory Free & Zero Page List Bytes: 11489280, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 1097728, Memory Available Bytes: 584646656, Memory Commit Limit: 2146951168, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 21.79778099, Memory Available KBytes: 570944, Memory Pages sec: 0, Memory Cache Bytes: 12451840, Memory Pool Nonpaged Bytes: 50946048, Memory Page Faults sec: 26.06401335, Memory Transition Faults sec: 4.86617129, Memory System Cache Resident Bytes: 12451840, Memory Standby Cache Reserve Bytes: 479756288, Memory Page Writes sec: 0, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 74469376, Memory System Driver Resident Bytes: 3129344, Memory Standby Cache Normal Priority Bytes: 18931712, Memory Pool Paged Allocs: 75692, Memory Pool Nonpaged Allocs: 57374, Memory pct_ Committed Bytes In Use: 39.26125329, Memory Free System Page Table Entries: 33557559, Memory Available MBytes: 557, Memory Modified Page List Bytes: 34582528, Memory Cache Faults sec: 0, Memory Committed Bytes: 842919936, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 28590080, Memory Write Copies sec: 0

[Assistant] normal


[User] PID: 3678, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 38472, dst_ip: 52.59.177.21, dst_port: 80, proto: tcp, service: http, duration: 1.31968, src_bytes: 242, dst_bytes: 12183, conn_state: SF, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 562, dst_pkts: 12, dst_ip_bytes: 12815, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:    04:05:24   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] src_ip: 192.168.1.184, src_port: 8080, dst_ip: 192.168.1.184, dst_port: 1499, proto: tcp, service: -, duration: 0.185443, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:37:54, latitude: 0, longitude: 10

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:02, temperature: 25.27755887, pressure: 0.800610627, humidity: 6.790662632

[Assistant] normal


[User] PID: 3675, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: atop

[Assistant] normal


[User] PID: 2949, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: boltd

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 39704, dst_ip: 52.201.27.16, dst_port: 443, proto: tcp, service: ssl, duration: 3.96376, src_bytes: 1102, dst_bytes: 6081, conn_state: SF, missed_bytes: 0, src_pkts: 14, src_ip_bytes: 1838, dst_pkts: 17, dst_ip_bytes: 6949, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2908, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: gvfsd-trash

[Assistant] normal


[User] src_ip: 192.168.1.190, src_port: 12045, dst_ip: 192.58.128.30, dst_port: 53, proto: udp, service: dns, duration: 0.021179, src_bytes: 28, dst_bytes: 1097, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 56, dst_pkts: 1, dst_ip_bytes: 1125, dns_query: (empty), dns_qclass: 1, dns_qtype: 2, dns_rcode: 0, dns_AA: T, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 33616, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 0.010392, src_bytes: 155, dst_bytes: 978, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 375, dst_pkts: 4, dst_ip_bytes: 1150, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 4185, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: 0, EXC: 0, State: S, CPU: 0.03, CMD: ostinato

[Assistant] attack


[User] PID: 6618, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <vsftpd>, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 37814, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 60, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.33, src_port: 7870, dst_ip: 192.168.1.193, dst_port: 49160, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 184, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 1841, dst_ip: 192.168.1.152, dst_port: 1841, proto: tcp, service: -, duration: 0.176897, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 33426, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 125.151127, src_bytes: 3034, dst_bytes: 3591, conn_state: RSTR, missed_bytes: 0, src_pkts: 7, src_ip_bytes: 3334, dst_pkts: 7, dst_ip_bytes: 3883, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.180, src_port: 48757, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.011295, src_bytes: 31, dst_bytes: 106, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 59, dst_pkts: 1, dst_ip_bytes: 134, dns_query: elasticsearch, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 25-Apr-19, time:  09:07:55 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] PID: 1134, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vsftpd, attack: 0

[Assistant] normal


[User] date: 25-Apr-19, time: 8:27:16, temperature: 37.96488698, pressure: -4.141623226, humidity: 54.63863566

[Assistant] attack


[User] src_ip: 172.17.0.7, src_port: 48841, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 4394, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: 0, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] src_ip: 192.168.1.180, src_port: 51209, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 59, dst_pkts: 0, dst_ip_bytes: 0, dns_query: elasticsearch, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 25-Apr-19, time: 8:52:48, latitude: 68.42005192, longitude: 74.49629753

[Assistant] attack


[User] PID: 2489, MINFLT: 0, MAJFLT: 0, VSTEXT: 78, VSIZE: 122, RSIZE: 2136, VGROW: 0, RGROW: 0, MEM: 0, CMD: at-spi2-regist

[Assistant] normal


[User] PID: 8139, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <systemd-udev>, attack: 0

[Assistant] normal


[User] PID: 1371, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: irqbalance

[Assistant] normal


[User] Processor(_Total) DPC Rate: 40, Processor(_Total) pct_ Idle Time: 73.33333333, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 2.8125, Processor(_Total) pct_ C1 Time: 73.33333333, Processor(_Total) pct_ Processor Time: 26.66666667, Processor(_Total) C1 Transitions sec: 2723.323602, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 23.85416667, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 2654.85718, Processor(_Total) Interrupts sec: 3929.585958, Process(_Total) Pool Paged Bytes: 7705608, Process(_Total) IO Read Operations sec: 7.133307844, Process(_Total) Working Set - Private: 781475840, Process(_Total) Working Set Peak: 2044268544, Process(_Total) IO Write Operations sec: 9.199967125, Process(_Total) Page File Bytes: 2032865280, Process(_Total) pct_ User Time: 2.8125, Process(_Total) Virtual Bytes Peak: 7995654144, Process(_Total) Page File Bytes Peak: 2738360320, Process(_Total) IO Other Bytes sec: 5810.379238, Process(_Total) Private Bytes: 2032865280, Process(_Total) IO Write Bytes sec: 10604.69544, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6673969152, Process(_Total) pct_ Processor Time: 100, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1034720, Process(_Total) Working Set: 836198400, Process(_Total) Page Faults sec: 6467.176891, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 257.5990795, Process(_Total) IO Data Operations sec: 16.33327497, Process(_Total) Thread Count: 551, Process(_Total) pct_ Privileged Time: 97.1875, Process(_Total) IO Data Bytes sec: 20657.65952, Process(_Total) IO Read Bytes sec: 10052.96408, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13672, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 98.79964696, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 91.66633911, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 190.4659861, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 1.399994997, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 1.333328569, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 2.733323566, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 1.399994997, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 1.333328569, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 92467200, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 823296, Memory Available Bytes: 5054464, Memory Commit Limit: 2918703104, Memory Transition Pages RePurposed sec: 6078.244947, Memory Pages Output sec: 4594.983581, Memory Page Reads sec: 2522.657652, Memory Demand Zero Faults sec: 630.4644138, Memory Available KBytes: 4936, Memory Pages sec: 12403.75568, Memory Cache Bytes: 446464, Memory Pool Nonpaged Bytes: 77217792, Memory Page Faults sec: 6560.909889, Memory Transition Faults sec: 3430.98774, Memory System Cache Resident Bytes: 446464, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 289.0656337, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 475136, Memory System Driver Resident Bytes: 1290240, Memory Standby Cache Normal Priority Bytes: 4579328, Memory Pool Paged Allocs: 59086, Memory Pool Nonpaged Allocs: 57304, Memory pct_ Committed Bytes In Use: 82.24184436, Memory Free System Page Table Entries: 33562140, Memory Available MBytes: 4, Memory Modified Page List Bytes: 53248, Memory Cache Faults sec: 0.466664999, Memory Committed Bytes: 2400395264, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 7808.772097, Memory Pool Paged Resident Bytes: 9711616, Memory Write Copies sec: 0

[Assistant] normal


[User] PID: 3191, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: 0, EXC: 0, State: S, CPU: 0, CMD: deja-dup-monit

[Assistant] attack


[User] PID: 4374, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] date: 31-Mar-19, time: 12:42:10, FC1_Read_Input_Register: 46056, FC2_Read_Discrete_Value: 37859, FC3_Read_Holding_Register: 56727, FC4_Read_Coil: 19015

[Assistant] normal


[User] PID: 11049, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: systemd-udevd, attack: 0

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:30, FC1_Read_Input_Register: 19494, FC2_Read_Discrete_Value: 22834, FC3_Read_Holding_Register: 26565, FC4_Read_Coil: 53038

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 59618, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1718, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: packagekitd

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 45810, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000016, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 41269, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.015894, src_bytes: 84, dst_bytes: 424, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 140, dst_pkts: 2, dst_ip_bytes: 480, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:    04:05:34   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] date: 26-Apr-19, time:  17:10:34 , motion_status: 0, light_status:  off

[Assistant] attack


[User] PID: 2821, TRUN: 1, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: 0, EXC: 0, State: R, CPU: 0.09, CMD: compiz

[Assistant] attack


[User] PID: 2797, TRUN: 0, TSLPI: 5, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: nautilus

[Assistant] normal


[User] date: 26-Apr-19, time:  13:54:32 , motion_status: 0, light_status:  off

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 53040, dst_ip: 192.168.1.133, dst_port: 31337, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:    04:05:59   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] PID: 3735, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: worer/u256:0, attack: 1

[Assistant] attack


[User] PID: 3675, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] PID: 3752, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: gnome-terminal, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 60255, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.00007, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 2270, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: gsd-xsettings

[Assistant] attack


[User] PID: 2738, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: indicator-eyb, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 44168, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.003098, src_bytes: 167, dst_bytes: 2987, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 435, dst_pkts: 7, dst_ip_bytes: 3359, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49415, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000015, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 6703, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 4, Status: -, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 58575, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000052, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 25-Apr-19, time:  10:02:35 , FC1_Read_Input_Register: 9136, FC2_Read_Discrete_Value: 5960, FC3_Read_Holding_Register: 41103, FC4_Read_Coil: 4059

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 57382, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.00003, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 2-Apr-19, time:  04:06:46 , motion_status: 1, light_status:  on

[Assistant] normal


[User] PID: 2874, TRUN: 0, TSLPI: 2, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: N, EXC: 0, State: S, CPU: 0, CMD: gvfs-gphoto2-v

[Assistant] normal


[User] PID: 1542, TRUN: 0, TSLPI: 17, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: 0, EXC: 0, State: S, CPU: 0, CMD: mysqld

[Assistant] attack


[User] PID: 2906, MINFLT: 150, MAJFLT: 0, VSTEXT: 10, VSIZE: 1.3, RSIZE: 79476, VGROW: 200, RGROW: 0, MEM: 0.02, CMD: compiz

[Assistant] attack


[User] PID: 2822, TRUN: 1, TSLPI: 0, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 4, Status: -, EXC: 0, State: R, CPU: 0, CMD: atop

[Assistant] attack


[User] src_ip: 192.168.1.1, src_port: 57444, dst_ip: 192.168.1.195, dst_port: 54199, proto: udp, service: -, duration: 0.000915, src_bytes: 573, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 629, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time:    12:39:43   , fridge_temperature: 4.15, temp_condition: low

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 59690, dst_ip: 192.168.1.152, dst_port: 80, proto: tcp, service: -, duration: 0.000078, src_bytes: 215, dst_bytes: 3440, conn_state: SHR, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 319, dst_pkts: 5, dst_ip_bytes: 3700, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 48783, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 1.806215, src_bytes: 14112, dst_bytes: 36612, conn_state: SF, missed_bytes: 0, src_pkts: 336, src_ip_bytes: 23520, dst_pkts: 168, dst_ip_bytes: 41316, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  04:58:44 , motion_status: 0, light_status:  off

[Assistant] attack


[User] date: 25-Apr-19, time:  09:05:25 , fridge_temperature: 4, temp_condition: low

[Assistant] attack


[User] PID: 3896, RDDSK: 0, WRDSK: 8, WCANCL: 0, DSK: 0.1, CMD: atop, attack: 0

[Assistant] normal


[User] date: 28-Apr-19, time:  10:16:44 , current_temperature: 29.36100241, thermostat_status: 0

[Assistant] attack


[User] PID: 2882, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: 0, EXC: 0, State: S, CPU: 0, CMD: vmtoolsd

[Assistant] attack


[User] PID: 3790, MINFLT: 0, MAJFLT: 0, VSTEXT: 2132, VSIZE: 2.4, RSIZE: 25364, VGROW: 0, RGROW: 0, MEM: 0.01, CMD: ostinato

[Assistant] normal


[User] date: 2-Apr-19, time:    04:05:28   , door_state: open, sphone_signal: true

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:45, FC1_Read_Input_Register: 34389, FC2_Read_Discrete_Value: 37032, FC3_Read_Holding_Register: 16789, FC4_Read_Coil: 6069

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:07, motion_status: 0, light_status:  off

[Assistant] normal


[User] PID: 9153, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: worer/u256:1, attack: 1

[Assistant] attack


[User] date: 31-Mar-19, time: 12:37:32, latitude: 0.300880844, longitude: 10.2247475

[Assistant] normal


[User] PID: 6044, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 4, Status: N, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] PID: 3897, RDDSK: 0, WRDSK: 12, WCANCL: 0, DSK: 0.12, CMD: atop, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 41968, dst_ip: 151.101.0.134, dst_port: 443, proto: tcp, service: ssl, duration: 16.364743, src_bytes: 2436, dst_bytes: 7214, conn_state: SF, missed_bytes: 0, src_pkts: 15, src_ip_bytes: 3200, dst_pkts: 13, dst_ip_bytes: 7898, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] Processor_DPC_Rate: 16, Processor_pct_ Idle_Time: 22.86118782, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 2.738682729, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 40.68900054, Processor_pct_ C1_Time: 22.86118782, Processor_pct_ Processor_Time: 68.46602458, Processor_C1_ransitions_sec: 2291.868994, Processor_pct_ DPC_Time: 0.704232702, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 27.77806768, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 1563.534802, Processor_Interrupts_sec: 10692.95151, Process_Pool_Paged Bytes: 14263216, Process_IO Read_Operations_sec: 0.400623868, Process_Working_Set_ Private: 1406222336, Process_Working_Set_Peak: 4918726656, Process_IO_Write Operations_sec: 894.3927857, Process_Page_File Bytes: 7056629760, Process_pct_ User_Time: 81.37800109, Process_Virtual_Bytes Peak: 1.06E+14, Process_Page_File Bytes Peak: 8543039488, Process_IO_Other_Bytes_sec: 87325.6872, Process_Private_Bytes: 7056629760, Process_IO_Write_Bytes_sec: 19419958.07, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.06E+14, Process_pct_ Processor_Time: 193.1162564, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 1910912, Process_Working Set: 1513902080, Process_Page Faults_sec: 12213.81987, Process_ID Process: 0, Process_IO Other Operations_sec: 512.3979274, Process_IO Data Operations_sec: 894.7934096, Process_Thread Count: 794, Process_pct_ Privileged_Time: 111.7382553, Process_IO Data Bytes_sec: 19419961.67, Process_IO Read Bytes_sec: 3.605614814, Process_Priority Base: 0, Process_Handle Count: 28979, Network_I(Intel R _82574L_GNC)TCP_APS: 0, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 2885.99419, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 227.1537333, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 3113.147924, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 4.206550616, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 6.009358023, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 10.21590864, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 0, Network_I(Intel R _82574L_GNC) Packets Sent sec: 4.206550616, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 6.009358023, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 196472832, Memory Free & Zero Page List Bytes: 16371712, Memory Cache Bytes Peak: 815652864, Memory System Code Resident Bytes: 1486848, Memory Available Bytes: 50278400, Memory Commit Limit: 8544112640, Memory Transition Pages RePurposed sec: 4223.677286, Memory Pages Output sec: 1132.763987, Memory Page Reads sec: 190.1961814, Memory Demand Zero Faults sec: 6647.051065, Memory Available KBytes: 49100, Memory Pages sec: 3260.377195, Memory Cache Bytes: 5935104, Memory Pool Nonpaged Bytes: 129785856, Memory Page Faults sec: 15010.67525, Memory Transition Faults sec: 7869.454642, Memory System Cache Resident Bytes: 0, Memory Long-Term Average Standby Cache Lifetime (s): 10, Memory Standby Cache Reserve Bytes: 5152768, Memory Page Writes sec: 32.04990945, Memory System Code Total Bytes: 3825664, Memory Standby Cache Core Bytes: 4272128, Memory System Driver Resident Bytes: 2314240, Memory Standby Cache Normal Priority Bytes: 24481792, Memory Pool Paged Allocs: 132267, Memory Pool Nonpaged Allocs: 130680, Memory pct_ Committed Bytes In Use: 92.75400115, Memory Free System Page Table Entries: 12229078, Memory Available MBytes: 47, Memory Modified Page List Bytes: 36864, Memory Cache Faults sec: 2729.250102, Memory Committed Bytes: 7925006336, Memory System Driver Total Bytes: 17117184, Memory Pages Input sec: 2127.613208, Memory Pool Paged Resident Bytes: 53948416, Memory Write Copies sec: 43.7681576, LogicalDisk(_Total) Avg  Disk Bytes Write: 20891.40803, LogicalDisk(_Total) pct_ Idle Time: 67.92857121, LogicalDisk(_Total) Disk Reads sec: 189.3949337, LogicalDisk(_Total) pct_ Free Space: 82.0158557, LogicalDisk(_Total) Disk Read Bytes sec: 8713165.304, LogicalDisk(_Total) Avg  Disk sec Read: 0.000835067, LogicalDisk(_Total) Disk Writes sec: 1247.943349, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.600935802, LogicalDisk(_Total) Free Megabytes: 167697, LogicalDisk(_Total) Avg  Disk sec Write: 0.000197646, LogicalDisk(_Total) Disk Bytes sec: 34784459.01, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.158159903, LogicalDisk(_Total) pct_ Disk Time: 40.4814581, LogicalDisk(_Total) Avg  Disk Bytes Read: 46005.27129, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.246654678, LogicalDisk(_Total) Avg  Disk Queue Length: 0.404814581, LogicalDisk(_Total) pct_ Disk Read Time: 15.81599029, LogicalDisk(_Total) Disk Write Bytes sec: 26071293.7, LogicalDisk(_Total) Disk Transfers sec: 1437.338283, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 24200.60707, LogicalDisk(_Total) pct_ Disk Write Time: 24.66546781, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000281637

[Assistant] normal


[User] src_ip: 192.168.1.39, src_port: 68, dst_ip: 192.168.1.190, dst_port: 68, proto: tcp, service: -, duration: 0.468235, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 100, src_ip_bytes: 4000, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.180, src_port: 56626, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000537, src_bytes: 31, dst_bytes: 106, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 59, dst_pkts: 1, dst_ip_bytes: 134, dns_query: elasticsearch, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] Processor(_Total) DPC Rate: 0, Processor(_Total) pct_ Idle Time: 86.30208333, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 11.04166667, Processor(_Total) pct_ C1 Time: 80, Processor(_Total) pct_ Processor Time: 13.69791667, Processor(_Total) C1 Transitions sec: 578.3818735, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 2.65625, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 19.53272118, Processor(_Total) Interrupts sec: 1232.494707, Process(_Total) Pool Paged Bytes: 10217112, Process(_Total) IO Read Operations sec: 8.266407597, Process(_Total) Working Set - Private: 1430708224, Process(_Total) Working Set Peak: 2492190720, Process(_Total) IO Write Operations sec: 6.199805698, Process(_Total) Page File Bytes: 1951227904, Process(_Total) pct_ User Time: 21.97916667, Process(_Total) Virtual Bytes Peak: 9209102336, Process(_Total) Page File Bytes Peak: 2241953792, Process(_Total) IO Other Bytes sec: 7903.085651, Process(_Total) Private Bytes: 1951227904, Process(_Total) IO Write Bytes sec: 11629.10221, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 8033173504, Process(_Total) pct_ Processor Time: 199.8958333, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1337792, Process(_Total) Working Set: 1761075200, Process(_Total) Page Faults sec: 1804.743439, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 349.1890564, Process(_Total) IO Data Operations sec: 14.4662133, Process(_Total) Thread Count: 651, Process(_Total) pct_ Privileged Time: 177.9166667, Process(_Total) IO Data Bytes sec: 16423.35196, Process(_Total) IO Read Bytes sec: 4794.249748, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 16623, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 3051.837689, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 497.2510828, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 3549.088772, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 7.333103514, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 10.59966781, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 17.93277132, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 7.333103514, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 10.59966781, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 109735936, Memory Free & Zero Page List Bytes: 239407104, Memory Cache Bytes Peak: 139370496, Memory System Code Resident Bytes: 49152, Memory Available Bytes: 768589824, Memory Commit Limit: 6070345728, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 1.53328528, Memory Demand Zero Faults sec: 1845.608825, Memory Available KBytes: 750576, Memory Pages sec: 2.799912251, Memory Cache Bytes: 27508736, Memory Pool Nonpaged Bytes: 71467008, Memory Page Faults sec: 1954.205422, Memory Transition Faults sec: 101.1968285, Memory System Cache Resident Bytes: 27508736, Memory Standby Cache Reserve Bytes: 176377856, Memory Page Writes sec: 0, Memory System Code Total Bytes: 4370432, Memory Standby Cache Core Bytes: 97460224, Memory System Driver Resident Bytes: 3751936, Memory Standby Cache Normal Priority Bytes: 255344640, Memory Pool Paged Allocs: 86710, Memory Pool Nonpaged Allocs: 88096, Memory pct_ Committed Bytes In Use: 46.16772536, Memory Free System Page Table Entries: 33556544, Memory Available MBytes: 732, Memory Modified Page List Bytes: 13246464, Memory Cache Faults sec: 8.19974302, Memory Committed Bytes: 2802540544, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 2.799912251, Memory Pool Paged Resident Bytes: 52695040, Memory Write Copies sec: 7.733090978

[Assistant] attack


[User] src_ip: 192.168.1.194, src_port: 80, dst_ip: 192.168.1.194, dst_port: 1421, proto: tcp, service: -, duration: 0.267882, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 55184, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 73, dst_pkts: 0, dst_ip_bytes: 0, dns_query: safebrowsing.googleapis.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 34296, dst_ip: 192.168.1.152, dst_port: 10502, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 85.02316147, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.234365103, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 8.124656896, Processor_pct_ C1_Time: 85.02316147, Processor_pct_ Processor_Time: 12.42557327, Processor_C1_ransitions_sec: 147.0943383, Processor_pct_ DPC_Time: 0.078121701, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 4.296693551, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 23.19910707, Processor_Interrupts_sec: 393.0848702, Process_Pool_Paged Bytes: 30485216, Process_IO Read_Operations_sec: 8.999653603, Process_Working_Set_ Private: 931905536, Process_Working_Set_Peak: 4783783936, Process_IO_Write Operations_sec: 9.899618964, Process_Page_File Bytes: 1955315712, Process_pct_ User_Time: 16.24931379, Process_Virtual_Bytes Peak: 2.49E+14, Process_Page_File Bytes Peak: 2838323200, Process_IO_Other_Bytes_sec: 6520.549024, Process_Private_Bytes: 1955315712, Process_IO_Write_Bytes_sec: 9210.645482, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 2.49E+14, Process_pct_ Processor_Time: 199.3665807, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2703240, Process_Working Set: 3067052032, Process_Page Faults_sec: 1440.444557, Process_ID Process: 0, Process_IO Other Operations_sec: 121.7953121, Process_IO Data Operations_sec: 18.89927257, Process_Thread Count: 1426, Process_pct_ Privileged_Time: 183.117267, Process_IO Data Bytes_sec: 11818.5451, Process_IO Read Bytes_sec: 2607.899622, Process_Priority Base: 0, Process_Handle Count: 50598, Network_I(Intel R _82574L_GNC)TCP_APS: 10711, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 2722.495211, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 156.5939727, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 2879.089184, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 2.899888383, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 6.499749825, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 9.399638208, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 2, Network_I(Intel R _82574L_GNC) Packets Sent sec: 2.899888383, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 6.499749825, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 123617280, Memory Free & Zero Page List Bytes: 85417984, Memory Cache Bytes Peak: 199274496, Memory System Code Resident Bytes: 0, Memory Available Bytes: 487886848, Memory Commit Limit: 5770170368, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 923.6644482, Memory Available KBytes: 476452, Memory Pages sec: 0, Memory Cache Bytes: 113078272, Memory Pool Nonpaged Bytes: 96239616, Memory Page Faults sec: 1435.344754, Memory Transition Faults sec: 553.078712, Memory System Cache Resident Bytes: 113078272, Memory Long-Term Average Standby Cache Lifetime (s): 1635, Memory Standby Cache Reserve Bytes: 64417792, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 185487360, Memory System Driver Resident Bytes: 7491584, Memory Standby Cache Normal Priority Bytes: 152563712, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 73.18640223, Memory Free System Page Table Entries: 12263391, Memory Available MBytes: 465, Memory Modified Page List Bytes: 2584576, Memory Cache Faults sec: 0, Memory Committed Bytes: 4222980096, Memory System Driver Total Bytes: 18079744, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 103292928, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 23552, LogicalDisk(_Total) pct_ Idle Time: 99.99584018, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 81.79739376, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 0.399984605, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 167409, LogicalDisk(_Total) Avg  Disk sec Write: 0.00033215, LogicalDisk(_Total) Disk Bytes sec: 9420.437407, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.004428813, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000132854, LogicalDisk(_Total) Avg  Disk Queue Length: 0.000132854, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 9420.437407, LogicalDisk(_Total) Disk Transfers sec: 0.399984605, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 23552, LogicalDisk(_Total) pct_ Disk Write Time: 0.004427813, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.00033215

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49631, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.000176, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  20:38:44 , fridge_temperature: 4.35, temp_condition: low

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:10, temperature: 23.54685287, pressure: 0.698371647, humidity: 3.103834721

[Assistant] normal


[User] date: 31-Mar-19, time:    12:43:40   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] date: 31-Mar-19, time:    12:40:08   , fridge_temperature: 8.4, temp_condition: high

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 60825, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.012484, src_bytes: 168, dst_bytes: 424, conn_state: SF, missed_bytes: 0, src_pkts: 4, src_ip_bytes: 280, dst_pkts: 2, dst_ip_bytes: 480, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2060, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: gnome-shell, attack: 1

[Assistant] attack


[User] PID: 5854, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: N, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] PID: 3675, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] date: 1-Apr-19, time:  20:23:46 , current_temperature: 31.90653298, thermostat_status: 1

[Assistant] normal


[User] PID: 2797, TRUN: 0, TSLPI: 5, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: nautilus

[Assistant] normal