[User] PID: 14821, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: ostinato

[Assistant] attack


[User] PID: 3055, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: nautilus, attack: 1

[Assistant] attack


[User] date: 26-Apr-19, time:  15:31:01 , temperature: 22.26876483, pressure: 4.117382604, humidity: 7.257525251

[Assistant] attack


[User] date: 26-Apr-19, time:  17:19:22 , motion_status: 0, light_status:  off

[Assistant] attack


[User] src_ip: 192.168.1.37, src_port: 37309, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 184, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 1512, dst_ip: 192.168.1.152, dst_port: 1512, proto: tcp, service: -, duration: 0.239594, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] Processor(_Total) DPC Rate: 39, Processor(_Total) pct_ Idle Time: 78.22916667, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.104166667, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 1.041666667, Processor(_Total) pct_ C1 Time: 73.33333333, Processor(_Total) pct_ Processor Time: 21.77083333, Processor(_Total) C1 Transitions sec: 3008.279442, Processor(_Total) pct_ DPC Time: 0.208333333, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 20.72916667, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 2867.012175, Processor(_Total) Interrupts sec: 4177.817742, Process(_Total) Pool Paged Bytes: 7897352, Process(_Total) IO Read Operations sec: 127.7338758, Process(_Total) Working Set - Private: 804233216, Process(_Total) Working Set Peak: 2008666112, Process(_Total) IO Write Operations sec: 127.9338766, Process(_Total) Page File Bytes: 2212085760, Process(_Total) pct_ User Time: 1.041666667, Process(_Total) Virtual Bytes Peak: 7985487872, Process(_Total) Page File Bytes Peak: 2600755200, Process(_Total) IO Other Bytes sec: 3625.748731, Process(_Total) Private Bytes: 2212085760, Process(_Total) IO Write Bytes sec: 32570.80498, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6902882304, Process(_Total) pct_ Processor Time: 99.6875, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1094824, Process(_Total) Working Set: 860921856, Process(_Total) Page Faults sec: 4621.286292, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 129.5338834, Process(_Total) IO Data Operations sec: 255.6677524, Process(_Total) Thread Count: 562, Process(_Total) pct_ Privileged Time: 98.64583333, Process(_Total) IO Data Bytes sec: 59659.05335, Process(_Total) IO Read Bytes sec: 27088.24837, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13607, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 142.6006056, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 107.467123, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 250.0677286, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 1.466672895, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 1.666673744, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 3.13334664, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 1.466672895, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 1.666673744, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 91058176, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 770048, Memory Available Bytes: 1294336, Memory Commit Limit: 2901925888, Memory Transition Pages RePurposed sec: 5645.157306, Memory Pages Output sec: 5366.62279, Memory Page Reads sec: 2334.009912, Memory Demand Zero Faults sec: 487.3354029, Memory Available KBytes: 1264, Memory Pages sec: 12420.25274, Memory Cache Bytes: 430080, Memory Pool Nonpaged Bytes: 52666368, Memory Page Faults sec: 4753.55352, Memory Transition Faults sec: 1933.274877, Memory System Cache Resident Bytes: 430080, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 575.2691096, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 200704, Memory System Driver Resident Bytes: 1507328, Memory Standby Cache Normal Priority Bytes: 1093632, Memory Pool Paged Allocs: 58892, Memory Pool Nonpaged Allocs: 51764, Memory pct_ Committed Bytes In Use: 88.3928647, Memory Free System Page Table Entries: 33562140, Memory Available MBytes: 1, Memory Modified Page List Bytes: 45056, Memory Cache Faults sec: 0.733336448, Memory Committed Bytes: 2565095424, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 7053.629954, Memory Pool Paged Resident Bytes: 13312000, Memory Write Copies sec: 0.200000849

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 81, dst_ip: 192.168.1.152, dst_port: 81, proto: tcp, service: -, duration: 0.048408, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 4, src_ip_bytes: 160, dst_pkts: 4, dst_ip_bytes: 160, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:16, motion_status: 1, light_status:  on

[Assistant] normal


[User] PID: 2577, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: vmtoolsd

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 60554, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2355, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vmtoolsd, attack: 1

[Assistant] attack


[User] date: 2-Apr-19, time:    04:02:13   , fridge_temperature: 5.55, temp_condition: low

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 37086, dst_ip: 192.168.1.152, dst_port: 80, proto: tcp, service: http, duration: 8.385304, src_bytes: 212, dst_bytes: 11229, conn_state: S3, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 480, dst_pkts: 11, dst_ip_bytes: 11809, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:22, temperature: 43.99216143, pressure: 0.905205564, humidity: 10.29478898

[Assistant] normal


[User] date: 31-Mar-19, time: 12:40:57, motion_status: 1, light_status:  on

[Assistant] normal


[User] src_ip: 192.168.1.180, src_port: 39752, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.00624, src_bytes: 41, dst_bytes: 89, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 69, dst_pkts: 1, dst_ip_bytes: 117, dns_query: elasticsearch.mydns.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:27, FC1_Read_Input_Register: 16566, FC2_Read_Discrete_Value: 44278, FC3_Read_Holding_Register: 45047, FC4_Read_Coil: 51787

[Assistant] normal


[User] PID: 2575, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: upstart-dbus-b, attack: 0

[Assistant] normal


[User] PID: 3197, TRUN: 0, TSLPI: 60, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: firefox

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 46584, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 5.801172, src_bytes: 504, dst_bytes: 890, conn_state: SF, missed_bytes: 0, src_pkts: 12, src_ip_bytes: 840, dst_pkts: 4, dst_ip_bytes: 1002, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 7180, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <systemd-udev>, attack: 0

[Assistant] normal


[User] PID: 4372, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: atop

[Assistant] normal


[User] date: 28-Apr-19, time:  10:49:15 , FC1_Read_Input_Register: 55672, FC2_Read_Discrete_Value: 39444, FC3_Read_Holding_Register: 14631, FC4_Read_Coil: 55144

[Assistant] attack


[User] src_ip: 192.168.1.33, src_port: 4444, dst_ip: 192.168.1.193, dst_port: 49200, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 1500, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 25-Apr-19, time:  15:16:48 , fridge_temperature: 5, temp_condition: low

[Assistant] attack


[User] date: 31-Mar-19, time: 12:40:51, motion_status: 0, light_status:  off

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 39271, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.001481, src_bytes: 35, dst_bytes: 67, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 63, dst_pkts: 1, dst_ip_bytes: 95, dns_query: broker.hivemq.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  09:37:50 , FC1_Read_Input_Register: 15694, FC2_Read_Discrete_Value: 59936, FC3_Read_Holding_Register: 12273, FC4_Read_Coil: 53787

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 73, dst_ip: 192.168.1.193, dst_port: 73, proto: tcp, service: -, duration: 0.000002, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.37, src_port: 43155, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: RSTRH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 25-Apr-19, time:  09:47:21 , FC1_Read_Input_Register: 9096, FC2_Read_Discrete_Value: 59561, FC3_Read_Holding_Register: 38342, FC4_Read_Coil: 27793

[Assistant] attack


[User] date: 25-Apr-19, time:  19:59:29 , latitude: 170.5671662, longitude: 183.4913711

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:02, FC1_Read_Input_Register: 25341, FC2_Read_Discrete_Value: 547, FC3_Read_Holding_Register: 32148, FC4_Read_Coil: 23851

[Assistant] normal


[User] PID: 1401, MINFLT: 3, MAJFLT: 0, VSTEXT: 36, VSIZE: 19296, RSIZE: 824, VGROW: 0, RGROW: 0, MEM: 0, CMD: irqbalance

[Assistant] attack


[User] PID: 1488, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: Xorg, attack: 0

[Assistant] normal


[User] PID: 2537, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: gnome-session

[Assistant] normal


[User] date: 2-Apr-19, time:  04:06:34 , motion_status: 0, light_status:  off

[Assistant] normal


[User] date: 2-Apr-19, time:    04:01:46   , fridge_temperature: 10.4, temp_condition: high

[Assistant] normal


[User] date: 26-Apr-19, time:  13:58:58 , temperature: 45.17252425, pressure: 0.687271523, humidity: 5.1475512

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 45595, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000057, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:34, motion_status: 1, light_status:  on

[Assistant] normal


[User] PID: 2118, RDDSK: 0, WRDSK: 4, WCANCL: 0, DSK: 0.06, CMD: apache2, attack: 0

[Assistant] normal


[User] date: 25-Apr-19, time: 9:56:16, temperature: 21.27486048, pressure: -2.929546645, humidity: 94.63366531

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 53660, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.012872, src_bytes: 270, dst_bytes: 1919, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 538, dst_pkts: 6, dst_ip_bytes: 2239, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 41798, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.002922, src_bytes: 168, dst_bytes: 436, conn_state: SF, missed_bytes: 0, src_pkts: 4, src_ip_bytes: 280, dst_pkts: 2, dst_ip_bytes: 492, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3739, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: worer/0:1, attack: 0

[Assistant] normal


[User] PID: 9530, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vsftpd, attack: 1

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:15, latitude: 2.762034696, longitude: 13.57881229

[Assistant] normal


[User] Processor(_Total) DPC Rate: 73, Processor(_Total) pct_ Idle Time: 77.70327433, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 1.145758737, Processor(_Total) pct_ C1 Time: 73.32855916, Processor(_Total) pct_ Processor Time: 22.29672567, Processor(_Total) C1 Transitions sec: 3057.513776, Processor(_Total) pct_ DPC Time: 0.416639541, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 21.14445669, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 2898.528659, Processor(_Total) Interrupts sec: 4131.013282, Process(_Total) Pool Paged Bytes: 7911432, Process(_Total) IO Read Operations sec: 0.799925116, Process(_Total) Working Set - Private: 810872832, Process(_Total) Working Set Peak: 2012528640, Process(_Total) IO Write Operations sec: 0.799925116, Process(_Total) Page File Bytes: 2031374336, Process(_Total) pct_ User Time: 1.145758737, Process(_Total) Virtual Bytes Peak: 8087371776, Process(_Total) Page File Bytes Peak: 2691776512, Process(_Total) IO Other Bytes sec: 3229.697657, Process(_Total) Private Bytes: 2031374336, Process(_Total) IO Write Bytes sec: 709.0002948, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6785245184, Process(_Total) pct_ Processor Time: 99.57685022, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1057400, Process(_Total) Working Set: 860733440, Process(_Total) Page Faults sec: 3944.497409, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 114.9892355, Process(_Total) IO Data Operations sec: 1.599850233, Process(_Total) Thread Count: 557, Process(_Total) pct_ Privileged Time: 98.43109148, Process(_Total) IO Data Bytes sec: 805.2579505, Process(_Total) IO Read Bytes sec: 96.25765567, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13758, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 77.99269884, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 73.99307326, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 151.9857721, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 0.999906395, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 0.999906395, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 1.999812791, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 0.999906395, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 0.999906395, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 92741632, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 712704, Memory Available Bytes: 2285568, Memory Commit Limit: 2918703104, Memory Transition Pages RePurposed sec: 4672.695907, Memory Pages Output sec: 4126.547034, Memory Page Reads sec: 2329.64858, Memory Demand Zero Faults sec: 324.569616, Memory Available KBytes: 2232, Memory Pages sec: 9764.085951, Memory Cache Bytes: 491520, Memory Pool Nonpaged Bytes: 56995840, Memory Page Faults sec: 4090.08378, Memory Transition Faults sec: 1435.732263, Memory System Cache Resident Bytes: 491520, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 612.6093183, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 425984, Memory System Driver Resident Bytes: 1224704, Memory Standby Cache Normal Priority Bytes: 1859584, Memory Pool Paged Allocs: 59139, Memory Pool Nonpaged Allocs: 52910, Memory pct_ Committed Bytes In Use: 81.51630567, Memory Free System Page Table Entries: 33562140, Memory Available MBytes: 2, Memory Modified Page List Bytes: 36864, Memory Cache Faults sec: 4.732890272, Memory Committed Bytes: 2379218944, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 5637.538918, Memory Pool Paged Resident Bytes: 7536640, Memory Write Copies sec: 0

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 94, dst_ip: 192.168.1.184, dst_port: 94, proto: tcp, service: -, duration: 0.00004, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3677, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] PID: 2841, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: compiz, attack: 1

[Assistant] attack


[User] date: 31-Mar-19, time: 12:40:28, motion_status: 0, light_status:  off

[Assistant] normal


[User] PID: 2420, MINFLT: 0, MAJFLT: 0, VSTEXT: 415, VSIZE: 40212, RSIZE: 2008, VGROW: 0, RGROW: 0, MEM: 0, CMD: dbus-daemon

[Assistant] normal


[User] PID: 3620, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 59182, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:56, current_temperature: 29.7653323, thermostat_status: 1

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 36690, dst_ip: 52.28.231.150, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:59, latitude: 3.525015921, longitude: 12.80742798

[Assistant] normal


[User] date: 26-Apr-19, time:  14:01:03 , latitude: 11.3215919, longitude: 20.86110848

[Assistant] attack


[User] date: 25-Apr-19, time: 8:52:42, temperature: 48.63321925, pressure: 3.529229839, humidity: 6.257941386

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:09, FC1_Read_Input_Register: 49052, FC2_Read_Discrete_Value: 38207, FC3_Read_Holding_Register: 54276, FC4_Read_Coil: 44097

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 47915, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000017, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 28-Apr-19, time:  11:26:20 , latitude: 141.0253847, longitude: 154.8713134

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:08, FC1_Read_Input_Register: 18083, FC2_Read_Discrete_Value: 65525, FC3_Read_Holding_Register: 14062, FC4_Read_Coil: 52880

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 61172, dst_ip: 192.168.1.133, dst_port: 8007, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3793, TRUN: 1, TSLPI: 11, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0.99, CMD: drone

[Assistant] normal


[User] date: 1-Apr-19, time:  15:20:44 , latitude: 13.87221907, longitude: 23.76674848

[Assistant] normal


[User] PID: 2583, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: ibus-dconf

[Assistant] normal


[User] PID: 5064, TRUN: 0, TSLPI: 0, TSLPU: 0, POLI: -, NICE: 0, PRI: 0, RTPR: 0, CPUNR: 0, Status: NE, EXC: 0, State: E, CPU: 0, CMD: <systemd-udev>

[Assistant] attack


[User] PID: 2825, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: indicator-appl, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.39, src_port: 42, dst_ip: 192.168.1.184, dst_port: 42, proto: tcp, service: -, duration: 0.551112, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 96, src_ip_bytes: 3840, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:38:03, latitude: 0.485986619, longitude: 10.50233249

[Assistant] normal


[User] PID: 2863, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: nautilus, attack: 1

[Assistant] attack


[User] PID: 1274, TRUN: 0, TSLPI: 27, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: mysqld

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:20, FC1_Read_Input_Register: 111, FC2_Read_Discrete_Value: 32135, FC3_Read_Holding_Register: 20705, FC4_Read_Coil: 60997

[Assistant] normal


[User] date: 28-Apr-19, time:  10:27:19 , current_temperature: 26.7024193, thermostat_status: 1

[Assistant] attack


[User] src_ip: 192.168.1.33, src_port: 33587, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: RSTRH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 4339, TRUN: 0, TSLPI: 0, TSLPU: 0, POLI: -, NICE: 0, PRI: 0, RTPR: 0, CPUNR: 0, Status: NE, EXC: 0, State: E, CPU: 0, CMD: <systemd-udev>

[Assistant] attack


[User] date: 28-Apr-19, time:  04:12:47 , fridge_temperature: 13.1, temp_condition: high

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 40228, dst_ip: 192.168.1.152, dst_port: 80, proto: tcp, service: http, duration: 0.002959, src_bytes: 147, dst_bytes: 3440, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 415, dst_pkts: 7, dst_ip_bytes: 3812, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 25-Apr-19, time:  15:03:02 , motion_status: 0, light_status:  off

[Assistant] attack


[User] PID: 3675, TRUN: 1, TSLPI: 0, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: R, CPU: 0.01, CMD: atop

[Assistant] normal


[User] PID: 1960, TRUN: 0, TSLPI: 2, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: Xorg

[Assistant] attack


[User] PID: 3128, MINFLT: 0, MAJFLT: 0, VSTEXT: 978, VSIZE: 2.9, RSIZE: 22916, VGROW: 0, RGROW: 0, MEM: 0.01, CMD: drone

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:32, temperature: 45.20545839, pressure: 1.371110849, humidity: 78.57701902

[Assistant] normal


[User] PID: 6121, RDDSK: 0, WRDSK: 8, WCANCL: 0, DSK: 0.03, CMD: apache2, attack: 1

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:05, motion_status: 0, light_status:  off

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 50543, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000484, src_bytes: 0, dst_bytes: 298, conn_state: SHR, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 2, dst_ip_bytes: 354, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 63.30366352, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 30.59498102, Processor_pct_ C1_Time: 63.30366352, Processor_pct_ Processor_Time: 35.91486073, Processor_C1_ransitions_sec: 173.5728426, Processor_pct_ DPC_Time: 0.078248033, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 5.320866264, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 58.39178722, Processor_Interrupts_sec: 1321.276942, Process_Pool_Paged Bytes: 22346168, Process_IO Read_Operations_sec: 3.605667821, Process_Working_Set_ Private: 2119835648, Process_Working_Set_Peak: 6309961728, Process_IO_Write Operations_sec: 0, Process_Page_File Bytes: 3956301824, Process_pct_ User_Time: 61.18996204, Process_Virtual_Bytes Peak: 1.52E+14, Process_Page_File Bytes Peak: 4990504960, Process_IO_Other_Bytes_sec: 2841.76703, Process_Private_Bytes: 3956301824, Process_IO_Write_Bytes_sec: 0, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.52E+14, Process_pct_ Processor_Time: 199.845477, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2613096, Process_Working Set: 2185269248, Process_Page Faults_sec: 1169.237949, Process_ID Process: 0, Process_IO Other Operations_sec: 63.49981663, Process_IO Data Operations_sec: 3.605667821, Process_Thread Count: 1012, Process_pct_ Privileged_Time: 138.655515, Process_IO Data Bytes_sec: 926.4563152, Process_IO Read Bytes_sec: 926.4563152, Process_Priority Base: 0, Process_Handle Count: 39582, Network_I(Intel R _82574L_GNC)TCP_APS: 5580, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4535.429332, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 256.9038323, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 4792.333164, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 4.406927337, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 5.909288929, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 10.31621627, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 1, Network_I(Intel R _82574L_GNC) Packets Sent sec: 4.406927337, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 5.909288929, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 139796480, Memory Free & Zero Page List Bytes: 11046912, Memory Cache Bytes Peak: 157425664, Memory System Code Resident Bytes: 0, Memory Available Bytes: 264556544, Memory Commit Limit: 8459431936, Memory Transition Pages RePurposed sec: 427.3717943, Memory Pages Output sec: 24.93920243, Memory Page Reads sec: 25.84061939, Memory Demand Zero Faults sec: 1221.019345, Memory Available KBytes: 258356, Memory Pages sec: 329.2175036, Memory Cache Bytes: 819200, Memory Pool Nonpaged Bytes: 119984128, Memory Page Faults sec: 1419.731705, Memory Transition Faults sec: 289.4550001, Memory System Cache Resident Bytes: 819200, Memory Long-Term Average Standby Cache Lifetime (s): 206, Memory Standby Cache Reserve Bytes: 31748096, Memory Page Writes sec: 4.507084777, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 194768896, Memory System Driver Resident Bytes: 1.76E+13, Memory Standby Cache Normal Priority Bytes: 26992640, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 57.70474958, Memory Free System Page Table Entries: 12213183, Memory Available MBytes: 252, Memory Modified Page List Bytes: 249856, Memory Cache Faults sec: 1.802833911, Memory Committed Bytes: 4881494016, Memory System Driver Total Bytes: 18259968, Memory Pages Input sec: 304.2783011, Memory Pool Paged Resident Bytes: 22425600, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 20640.62745, LogicalDisk(_Total) pct_ Idle Time: 99.63152763, LogicalDisk(_Total) Disk Reads sec: 24.63873011, LogicalDisk(_Total) pct_ Free Space: 81.00682586, LogicalDisk(_Total) Disk Read Bytes sec: 1256015.957, LogicalDisk(_Total) Avg  Disk sec Read: 0.000431461, LogicalDisk(_Total) Disk Writes sec: 5.108029414, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.100157439, LogicalDisk(_Total) Free Megabytes: 165791, LogicalDisk(_Total) Avg  Disk sec Write: 0.000264031, LogicalDisk(_Total) Disk Bytes sec: 1361448.889, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.010630665, LogicalDisk(_Total) pct_ Disk Time: 0.399311858, LogicalDisk(_Total) Avg  Disk Bytes Read: 50977.30081, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.001348681, LogicalDisk(_Total) Avg  Disk Queue Length: 0.011979346, LogicalDisk(_Total) pct_ Disk Read Time: 0.35435517, LogicalDisk(_Total) Disk Write Bytes sec: 105432.9321, LogicalDisk(_Total) Disk Transfers sec: 29.74675953, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 45767.97306, LogicalDisk(_Total) pct_ Disk Write Time: 0.044955686, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000402711

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:08, temperature: 34.03995808, pressure: 0.070881383, humidity: 89.11391402

[Assistant] normal


[User] date: 25-Apr-19, time:  19:23:52 , latitude: 150.8270755, longitude: 165.2716785

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 53492, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.000025, src_bytes: 58, dst_bytes: 58, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 86, dst_pkts: 1, dst_ip_bytes: 86, dns_query: testphp.vulnweb.com/listproducts.php.hub, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: T, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:38:47, latitude: 0.72157714, longitude: 10.5890933

[Assistant] normal


[User] PID: 1934, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] PID: 2596, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: unity-settings, attack: 0

[Assistant] normal


[User] PID: 1194, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 5, Status: -, EXC: 0, State: S, CPU: 0, CMD: kerneloops

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 35287, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.003556, src_bytes: 66, dst_bytes: 160, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 122, dst_pkts: 2, dst_ip_bytes: 216, dns_query: trc.taboola.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:39:48, latitude: 0.88644455, longitude: 11.18554065

[Assistant] normal


[User] PID: 2925, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: mission-contro, attack: 0

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:46, temperature: 22.29586158, pressure: 1.451270252, humidity: 35.20925323

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:03, motion_status: 1, light_status:  on

[Assistant] normal


[User] Processor(_Total) DPC Rate: 17, Processor(_Total) pct_ Idle Time: 78.125, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 0.9375, Processor(_Total) pct_ C1 Time: 80, Processor(_Total) pct_ Processor Time: 21.875, Processor(_Total) C1 Transitions sec: 2692.850869, Processor(_Total) pct_ DPC Time: 1.458333333, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 20.9375, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 2380.052704, Processor(_Total) Interrupts sec: 3548.845847, Process(_Total) Pool Paged Bytes: 8261976, Process(_Total) IO Read Operations sec: 2.533318471, Process(_Total) Working Set - Private: 778948608, Process(_Total) Working Set Peak: 2023030784, Process(_Total) IO Write Operations sec: 1.733323165, Process(_Total) Page File Bytes: 2064416768, Process(_Total) pct_ User Time: 0.9375, Process(_Total) Virtual Bytes Peak: 8259997696, Process(_Total) Page File Bytes Peak: 2677391360, Process(_Total) IO Other Bytes sec: 7480.489448, Process(_Total) Private Bytes: 2064416768, Process(_Total) IO Write Bytes sec: 1394.258487, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6971846656, Process(_Total) pct_ Processor Time: 98.54166667, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1221384, Process(_Total) Working Set: 838938624, Process(_Total) Page Faults sec: 4000.976528, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 383.5310833, Process(_Total) IO Data Operations sec: 4.266641636, Process(_Total) Thread Count: 578, Process(_Total) pct_ Privileged Time: 97.60416667, Process(_Total) IO Data Bytes sec: 2001.454925, Process(_Total) IO Read Bytes sec: 607.1964378, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 14415, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 203.5988056, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 97.46609487, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 301.0649004, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 1.399991787, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 2.266653369, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 3.666645156, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 1.399991787, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 2.266653369, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 92868608, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 757760, Memory Available Bytes: 22335488, Memory Commit Limit: 2918703104, Memory Transition Pages RePurposed sec: 4251.841723, Memory Pages Output sec: 5115.036658, Memory Page Reads sec: 1838.855879, Memory Demand Zero Faults sec: 562.2633681, Memory Available KBytes: 21812, Memory Pages sec: 9749.209471, Memory Cache Bytes: 561152, Memory Pool Nonpaged Bytes: 52621312, Memory Page Faults sec: 4155.175623, Memory Transition Faults sec: 1755.256369, Memory System Cache Resident Bytes: 561152, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 574.3299639, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 188416, Memory System Driver Resident Bytes: 1261568, Memory Standby Cache Normal Priority Bytes: 22147072, Memory Pool Paged Allocs: 59535, Memory Pool Nonpaged Allocs: 52732, Memory pct_ Committed Bytes In Use: 82.81399546, Memory Free System Page Table Entries: 33562140, Memory Available MBytes: 21, Memory Modified Page List Bytes: 65536, Memory Cache Faults sec: 1.999988267, Memory Committed Bytes: 2417094656, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 4634.172813, Memory Pool Paged Resident Bytes: 13082624, Memory Write Copies sec: 0.399997653

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 37, dst_ip: 192.168.1.152, dst_port: 37, proto: tcp, service: -, duration: 0.00004, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3257, MINFLT: 12660, MAJFLT: 0, VSTEXT: 193, VSIZE: 1.8, RSIZE: 225.5, VGROW: 0, RGROW: 8204, MEM: 0.06, CMD: Web-Content

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:51, temperature: 31.63236353, pressure: 0.550968002, humidity: 71.57725717

[Assistant] normal


[User] date: 2-Apr-19, time:  04:06:56 , current_temperature: 27.47588859, thermostat_status: 0

[Assistant] normal


[User] PID: 2982, MINFLT: 0, MAJFLT: 0, VSTEXT: 119, VSIZE: 472.7, RSIZE: 10744, VGROW: 0, RGROW: 44, MEM: 0, CMD: zeitgeist-data

[Assistant] normal


[User] PID: 4470, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0.02, CMD: tcpdump

[Assistant] normal


[User] src_ip: 192.168.1.33, src_port: 39627, dst_ip: 192.168.1.193, dst_port: 135, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 25-Apr-19, time:  09:59:02 , FC1_Read_Input_Register: 18110, FC2_Read_Discrete_Value: 54724, FC3_Read_Holding_Register: 60138, FC4_Read_Coil: 21017

[Assistant] attack


[User] date: 2-Apr-19, time:    04:07:11   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 1880, dst_ip: 192.168.1.152, dst_port: 51782, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 26-Apr-19, time:  15:34:29 , motion_status: 1, light_status:  on

[Assistant] attack


[User] date: 1-Apr-19, time:  17:14:13 , latitude: 71.7731846, longitude: 84.45270652

[Assistant] normal


[User] src_ip: 192.168.1.79, src_port: 42633, dst_ip: 192.168.1.255, dst_port: 15600, proto: udp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 63, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:07, temperature: 41.28315615, pressure: 1.035, humidity: 66.67038834

[Assistant] normal


[User] date: 1-Apr-19, time:   15:09:43   , fridge_temperature: 5.75, temp_condition: low

[Assistant] normal


[User] PID: 4375, MINFLT: 2074, MAJFLT: 0, VSTEXT: 148, VSIZE: 17952, RSIZE: 2488, VGROW: 0, RGROW: 20, MEM: 0, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 33492, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 172.17.0.8, src_port: 34167, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.012361, src_bytes: 0, dst_bytes: 178, conn_state: SHR, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 2, dst_ip_bytes: 234, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 1893, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: Xorg, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 45844, dst_ip: 192.168.1.49, dst_port: 9415, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:40:59, temperature: 46.64320164, pressure: 0.538982757, humidity: 11.99537951

[Assistant] normal


[User] PID: 2863, MINFLT: 0, MAJFLT: 0, VSTEXT: 127, VSIZE: 452.9, RSIZE: 13304, VGROW: 0, RGROW: 0, MEM: 0, CMD: tracker-store

[Assistant] attack


[User] PID: 3197, TRUN: 0, TSLPI: 63, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: firefox

[Assistant] normal


[User] PID: 3790, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: ostinato

[Assistant] normal


[User] date: 28-Apr-19, time: 4:01:50, temperature: 47.54343556, pressure: 2.561548665, humidity: 17.63281091

[Assistant] attack


[User] date: 31-Mar-19, time: 12:42:04, motion_status: 1, light_status:  on

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:15, FC1_Read_Input_Register: 30890, FC2_Read_Discrete_Value: 9296, FC3_Read_Holding_Register: 17474, FC4_Read_Coil: 5771

[Assistant] normal


[User] date: 25-Apr-19, time: 8:31:49, motion_status: 0, light_status:  off

[Assistant] attack


[User] PID: 5843, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:50, motion_status: 0, light_status:  off

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:31, FC1_Read_Input_Register: 11736, FC2_Read_Discrete_Value: 53206, FC3_Read_Holding_Register: 37629, FC4_Read_Coil: 37407

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 56561, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000017, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 26-Apr-19, time:  14:27:07 , FC1_Read_Input_Register: 22999, FC2_Read_Discrete_Value: 44400, FC3_Read_Holding_Register: 30098, FC4_Read_Coil: 2809

[Assistant] attack


[User] src_ip: 192.168.1.195, src_port: 1478, dst_ip: 192.168.1.195, dst_port: 1478, proto: tcp, service: -, duration: 0.277206, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 52212, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000042, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 75, dst_ip: 192.168.1.194, dst_port: 75, proto: tcp, service: -, duration: 0.000011, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  04:40:27 , latitude: 8.690051427, longitude: 17.89162557

[Assistant] attack


[User] PID: 10557, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] PID: 4470, MINFLT: 0, MAJFLT: 0, VSTEXT: 959, VSIZE: 114.7, RSIZE: 98.2, VGROW: 0, RGROW: 0, MEM: 0.03, CMD: tcpdump

[Assistant] normal


[User] PID: 1189, MINFLT: 0, MAJFLT: 0, VSTEXT: 1071, VSIZE: 342.1, RSIZE: 7452, VGROW: 0, RGROW: 0, MEM: 0, CMD: NetworkManager

[Assistant] attack


[User] PID: 1851, TRUN: 0, TSLPI: 2, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: vmtoolsd

[Assistant] normal


[User] PID: 3615, MINFLT: 0, MAJFLT: 0, VSTEXT: 0, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: kworker/3:2

[Assistant] attack


[User] date: 2-Apr-19, time:  04:03:46 , current_temperature: 32.77277174, thermostat_status: 0

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 56882, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 0.183286, src_bytes: 238, dst_bytes: 1951, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 458, dst_pkts: 5, dst_ip_bytes: 2163, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 80, dst_ip: 192.168.1.193, dst_port: 1833, proto: tcp, service: -, duration: 0.209754, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.180, src_port: 41277, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.006783, src_bytes: 31, dst_bytes: 106, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 59, dst_pkts: 1, dst_ip_bytes: 134, dns_query: elasticsearch, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:52, current_temperature: 29.20505427, thermostat_status: 1

[Assistant] normal


[User] PID: 2973, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: compiz, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 36950, dst_ip: 40.90.189.152, dst_port: 443, proto: tcp, service: ssl, duration: 0.675083, src_bytes: 269, dst_bytes: 3642, conn_state: SF, missed_bytes: 0, src_pkts: 10, src_ip_bytes: 689, dst_pkts: 7, dst_ip_bytes: 3934, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2498, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: upstart-dbus-b

[Assistant] normal


[User] PID: 3793, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: drone, attack: 0

[Assistant] normal


[User] date: 31-Mar-19, time:    12:40:13   , fridge_temperature: 8.4, temp_condition: high

[Assistant] normal


[User] PID: 2500, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: dbus-daemon, attack: 1

[Assistant] attack


[User] PID: 2791, MINFLT: 8, MAJFLT: 0, VSTEXT: 1350, VSIZE: 1.4, RSIZE: 56260, VGROW: 0, RGROW: 0, MEM: 0.01, CMD: nautilus

[Assistant] attack


[User] date: 1-Apr-19, time:  20:31:54 , motion_status: 0, light_status:  off

[Assistant] normal


[User] src_ip: 192.168.1.195, src_port: 1222, dst_ip: 192.168.1.195, dst_port: 1222, proto: tcp, service: -, duration: 0.208971, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 1705, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: 0, EXC: 0, State: S, CPU: 0, CMD: kerneloops

[Assistant] attack


[User] date: 1-Apr-19, time:  18:17:07 , latitude: 105.7285856, longitude: 118.0853311

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 86, dst_ip: 192.168.1.152, dst_port: 86, proto: tcp, service: -, duration: 0.00014, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 4175, MINFLT: 282, MAJFLT: 0, VSTEXT: 0, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: <grep>

[Assistant] normal


[User] PID: 8027, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vsftpd, attack: 0

[Assistant] normal


[User] PID: 2575, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: upstart-dbus-b, attack: 0

[Assistant] normal


[User] date: 28-Apr-19, time:  04:21:32 , latitude: 15.72073445, longitude: 24.25587342

[Assistant] attack


[User] src_ip: 192.168.1.79, src_port: 56934, dst_ip: 192.168.1.255, dst_port: 15600, proto: udp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 63, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 8103, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <systemd-udev>, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 42, dst_ip: 192.168.1.193, dst_port: 42, proto: tcp, service: -, duration: 0.000035, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 35, dst_ip: 18.195.161.8, dst_port: 35, proto: tcp, service: -, duration: 0.531721, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 200, src_ip_bytes: 8000, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:    04:05:17   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] PID: 2823, TRUN: 0, TSLPI: 11, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 5, Status: -, EXC: 0, State: S, CPU: 0.02, CMD: node-red

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:08, FC1_Read_Input_Register: 1095, FC2_Read_Discrete_Value: 46478, FC3_Read_Holding_Register: 736, FC4_Read_Coil: 8686

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49925, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000107, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 1-Apr-19, time:  17:47:54 , latitude: 95.16164939, longitude: 101.0186588

[Assistant] normal


[User] date: 25-Apr-19, time: 8:42:14, current_temperature: 26.294625, thermostat_status: 1

[Assistant] attack


[User] src_ip: 192.168.1.33, src_port: 7870, dst_ip: 192.168.1.193, dst_port: 49165, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 1016, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:38:27, latitude: 0.46458783, longitude: 10.70444841

[Assistant] normal


[User] PID: 3042, TRUN: 0, TSLPI: 58, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 4, Status: -, EXC: 0, State: S, CPU: 0, CMD: firefox

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 57842, dst_ip: 192.168.1.184, dst_port: 21, proto: tcp, service: -, duration: 0.000016, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 60, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 1-Apr-19, time:   15:16:08   , fridge_temperature: 9.95, temp_condition: high

[Assistant] normal


[User] date: 31-Mar-19, time:    12:41:56   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:52, temperature: 34.55960673, pressure: 1.262296846, humidity: 42.12313325

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 3, dst_ip: 192.168.1.1, dst_port: 3, proto: icmp, service: -, duration: 145.839553, src_bytes: 2945718, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 11886, src_ip_bytes: 3278526, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.39, src_port: 53, dst_ip: 176.28.50.165, dst_port: 53, proto: tcp, service: -, duration: 0.583318, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 188, src_ip_bytes: 7520, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 4470, MINFLT: 0, MAJFLT: 0, VSTEXT: 959, VSIZE: 114.7, RSIZE: 99, VGROW: 0, RGROW: 0, MEM: 0.03, CMD: tcpdump

[Assistant] normal


[User] PID: 3894, RDDSK: 0, WRDSK: 20, WCANCL: 0, DSK: 0.17, CMD: atop, attack: 0

[Assistant] normal


[User] date: 28-Apr-19, time:  12:38:53 , temperature: 30.31877231, pressure: 0.51895729, humidity: 42.27565367

[Assistant] attack


[User] date: 28-Apr-19, time:  04:45:46 , fridge_temperature: 2, temp_condition: low

[Assistant] attack


[User] PID: 14800, RDDSK: 0, WRDSK: 20, WCANCL: 0, DSK: 0.31, CMD: atop, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 49170, dst_ip: 192.168.1.152, dst_port: 80, proto: tcp, service: http, duration: 0.082052, src_bytes: 218, dst_bytes: 3440, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 486, dst_pkts: 7, dst_ip_bytes: 3812, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3135, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: update-notifie, attack: 1

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:59, temperature: 25.25003509, pressure: 2.675893758, humidity: 85.10124997

[Assistant] normal


[User] PID: 10408, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <vsftpd>, attack: 0

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 57.66902769, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 31.32854042, Processor_pct_ C1_Time: 57.66902769, Processor_pct_ Processor_Time: 40.38983457, Processor_C1_ransitions_sec: 656.6113462, Processor_pct_ DPC_Time: 0.078126036, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 9.06262017, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 105.3018196, Processor_Interrupts_sec: 2576.344519, Process_Pool_Paged Bytes: 24756328, Process_IO Read_Operations_sec: 0, Process_Working_Set_ Private: 1784631296, Process_Working_Set_Peak: 5887250432, Process_IO_Write Operations_sec: 0.800013824, Process_Page_File Bytes: 3917828096, Process_pct_ User_Time: 62.65708083, Process_Virtual_Bytes Peak: 1.59E+14, Process_Page_File Bytes Peak: 4960325632, Process_IO_Other_Bytes_sec: 4982.286094, Process_Private_Bytes: 3917828096, Process_IO_Write_Bytes_sec: 8372.944684, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.59E+14, Process_pct_ Processor_Time: 199.8464, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2769624, Process_Working Set: 1907032064, Process_Page Faults_sec: 10916.88864, Process_ID Process: 0, Process_IO Other Operations_sec: 98.1016952, Process_IO Data Operations_sec: 0.800013824, Process_Thread Count: 1013, Process_pct_ Privileged_Time: 137.1893191, Process_IO Data Bytes_sec: 8372.944684, Process_IO Read Bytes_sec: 0, Process_Priority Base: 0, Process_Handle Count: 39983, Network_I(Intel R _82574L_GNC)TCP_APS: 5732, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4866.984101, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 193.2033386, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5060.18744, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 3.600062209, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 6.500112322, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 10.10017453, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 2, Network_I(Intel R _82574L_GNC) Packets Sent sec: 3.600062209, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 6.500112322, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 105598976, Memory Free & Zero Page List Bytes: 6709248, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 542236672, Memory Commit Limit: 5674004480, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 1847.431924, Memory Page Reads sec: 6.60011405, Memory Demand Zero Faults sec: 2004.03463, Memory Available KBytes: 529528, Memory Pages sec: 1907.732966, Memory Cache Bytes: 2297856, Memory Pool Nonpaged Bytes: 99102720, Memory Page Faults sec: 10935.78897, Memory Transition Faults sec: 8162.141042, Memory System Cache Resident Bytes: 2297856, Memory Long-Term Average Standby Cache Lifetime (s): 78, Memory Standby Cache Reserve Bytes: 212803584, Memory Page Writes sec: 76.7013254, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 215465984, Memory System Driver Resident Bytes: 1.76E+13, Memory Standby Cache Normal Priority Bytes: 107257856, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 85.65412142, Memory Free System Page Table Entries: 12209094, Memory Available MBytes: 517, Memory Modified Page List Bytes: 159744, Memory Cache Faults sec: 0.300005184, Memory Committed Bytes: 4860018688, Memory System Driver Total Bytes: 18178048, Memory Pages Input sec: 60.301042, Memory Pool Paged Resident Bytes: 32030720, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 93937.46173, LogicalDisk(_Total) pct_ Idle Time: 99.320983, LogicalDisk(_Total) Disk Reads sec: 7.10012269, LogicalDisk(_Total) pct_ Free Space: 82.67346809, LogicalDisk(_Total) Disk Read Bytes sec: 262148.5299, LogicalDisk(_Total) Avg  Disk sec Read: 0.000523728, LogicalDisk(_Total) Disk Writes sec: 81.0013997, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 169202, LogicalDisk(_Total) Avg  Disk sec Write: 0.000322307, LogicalDisk(_Total) Disk Bytes sec: 7871214.415, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.003718519, LogicalDisk(_Total) pct_ Disk Time: 0.994190183, LogicalDisk(_Total) Avg  Disk Bytes Read: 36921.69014, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.026107196, LogicalDisk(_Total) Avg  Disk Queue Length: 0.029825715, LogicalDisk(_Total) pct_ Disk Read Time: 0.123950644, LogicalDisk(_Total) Disk Write Bytes sec: 7609065.885, LogicalDisk(_Total) Disk Transfers sec: 88.10152239, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 89342.54711, LogicalDisk(_Total) pct_ Disk Write Time: 0.870239539, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000338539

[Assistant] normal


[User] PID: 4372, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] date: 28-Apr-19, time: 4:09:30, temperature: 44.81106265, pressure: 0.734455832, humidity: 17.52102898

[Assistant] attack


[User] Processor(_Total) DPC Rate: 9, Processor(_Total) pct_ Idle Time: 71.35881213, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 3.229376899, Processor(_Total) pct_ C1 Time: 73.33810764, Processor(_Total) pct_ Processor Time: 28.64118787, Processor(_Total) C1 Transitions sec: 3754.425065, Processor(_Total) pct_ DPC Time: 0.416693793, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 25.4183214, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 3770.626036, Processor(_Total) Interrupts sec: 5146.241833, Process(_Total) Pool Paged Bytes: 8203520, Process(_Total) IO Read Operations sec: 14.7342166, Process(_Total) Working Set - Private: 730591232, Process(_Total) Working Set Peak: 2084405248, Process(_Total) IO Write Operations sec: 20.26788166, Process(_Total) Page File Bytes: 1970794496, Process(_Total) pct_ User Time: 3.229376899, Process(_Total) Virtual Bytes Peak: 8223256576, Process(_Total) Page File Bytes Peak: 2318450688, Process(_Total) IO Other Bytes sec: 6029.828135, Process(_Total) Private Bytes: 1970794496, Process(_Total) IO Write Bytes sec: 16510.65643, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 7075618816, Process(_Total) pct_ Processor Time: 99.58981663, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1218688, Process(_Total) Working Set: 789921792, Process(_Total) Page Faults sec: 4226.853386, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 293.4842601, Process(_Total) IO Data Operations sec: 35.00209826, Process(_Total) Thread Count: 560, Process(_Total) pct_ Privileged Time: 96.36043973, Process(_Total) IO Data Bytes sec: 32412.40968, Process(_Total) IO Read Bytes sec: 15901.75326, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 14303, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 8784.19325, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 177.2106232, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 8961.403873, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 2.800167861, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 7.200431642, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 10.0005995, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 2.800167861, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 7.200431642, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 97394688, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 80883712, Memory System Code Resident Bytes: 958464, Memory Available Bytes: 23683072, Memory Commit Limit: 2567745536, Memory Transition Pages RePurposed sec: 5864.218207, Memory Pages Output sec: 5437.592632, Memory Page Reads sec: 2665.693133, Memory Demand Zero Faults sec: 674.0404065, Memory Available KBytes: 23128, Memory Pages sec: 12391.27615, Memory Cache Bytes: 614400, Memory Pool Nonpaged Bytes: 57171968, Memory Page Faults sec: 4374.462234, Memory Transition Faults sec: 1035.995438, Memory System Cache Resident Bytes: 614400, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 1250.808315, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 77824, Memory System Driver Resident Bytes: 1400832, Memory Standby Cache Normal Priority Bytes: 23605248, Memory Pool Paged Allocs: 62399, Memory Pool Nonpaged Allocs: 54109, Memory pct_ Committed Bytes In Use: 91.05809463, Memory Free System Page Table Entries: 33563833, Memory Available MBytes: 22, Memory Modified Page List Bytes: 45056, Memory Cache Faults sec: 0.533365307, Memory Committed Bytes: 2338140160, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 6953.683517, Memory Pool Paged Resident Bytes: 13770752, Memory Write Copies sec: 0

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:02, FC1_Read_Input_Register: 16711, FC2_Read_Discrete_Value: 52300, FC3_Read_Holding_Register: 16567, FC4_Read_Coil: 16296

[Assistant] normal


[User] PID: 1428, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: irqbalance, attack: 1

[Assistant] attack


[User] PID: 2832, MINFLT: 5, MAJFLT: 0, VSTEXT: 121, VSIZE: 520.7, RSIZE: 3144, VGROW: 0, RGROW: 76, MEM: 0, CMD: indicator-keyb

[Assistant] attack


[User] PID: 2334, MINFLT: 132, MAJFLT: 233.6, VSTEXT: 6064, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: gsd-disk-utili

[Assistant] attack


[User] date: 1-Apr-19, time:  20:08:56 , current_temperature: 26.23573873, thermostat_status: 1

[Assistant] normal


[User] date: 28-Apr-19, time:  05:14:31 , fridge_temperature: 11.85, temp_condition: high

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 58908, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000075, src_bytes: 58, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 114, dst_pkts: 0, dst_ip_bytes: 0, dns_query: nodered.org, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.33, src_port: 41917, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 1500, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 50180, dst_ip: 18.194.169.124, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:    04:05:01   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] PID: 2433, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: dbus-daemon, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49769, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.009908, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 49694, dst_ip: 192.168.1.49, dst_port: 113, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 37140, dst_ip: 192.168.1.184, dst_port: 443, proto: tcp, service: -, duration: 0.000005, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3748, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] PID: 2433, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: dbus-daemon, attack: 0

[Assistant] normal


[User] PID: 3294, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 1, Status: 0, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] attack


[User] date: 2-Apr-19, time:  04:06:19 , current_temperature: 26.39395589, thermostat_status: 1

[Assistant] normal


[User] src_ip: 192.168.1.195, src_port: 1732, dst_ip: 192.168.1.195, dst_port: 1732, proto: tcp, service: -, duration: 0.310486, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 9024, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <vsftpd>, attack: 1

[Assistant] attack


[User] PID: 3155, MINFLT: 0, MAJFLT: 0, VSTEXT: 280, VSIZE: 711.5, RSIZE: 8164, VGROW: 0, RGROW: 0, MEM: 0, CMD: gnome-terminal

[Assistant] normal


[User] PID: 6199, RDDSK: 0, WRDSK: 12, WCANCL: 0, DSK: 0.01, CMD: apache2, attack: 1

[Assistant] attack