[User] Processor(_Total) DPC Rate: 0, Processor(_Total) pct_ Idle Time: 98.64583333, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 1.041666667, Processor(_Total) pct_ C1 Time: 93.33333333, Processor(_Total) pct_ Processor Time: 1.354166667, Processor(_Total) C1 Transitions sec: 65.06640987, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 0.3125, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 2.133324914, Processor(_Total) Interrupts sec: 67.73306601, Process(_Total) Pool Paged Bytes: 4936488, Process(_Total) IO Read Operations sec: 0, Process(_Total) Working Set - Private: 163999744, Process(_Total) Working Set Peak: 926412800, Process(_Total) IO Write Operations sec: 0.733330439, Process(_Total) Page File Bytes: 526512128, Process(_Total) pct_ User Time: 1.041666667, Process(_Total) Virtual Bytes Peak: 4130967552, Process(_Total) Page File Bytes Peak: 748625920, Process(_Total) IO Other Bytes sec: 1051.59585, Process(_Total) Private Bytes: 526512128, Process(_Total) IO Write Bytes sec: 2423.457102, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 3338616832, Process(_Total) pct_ Processor Time: 100, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 705984, Process(_Total) Working Set: 448544768, Process(_Total) Page Faults sec: 256.1989889, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 174.3993117, Process(_Total) IO Data Operations sec: 0.733330439, Process(_Total) Thread Count: 436, Process(_Total) pct_ Privileged Time: 98.95833333, Process(_Total) IO Data Bytes sec: 2423.457102, Process(_Total) IO Read Bytes sec: 0, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 10930, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 0, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 0, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 0, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 0, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 0, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 0, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 0, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 0, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 97869824, Memory Free & Zero Page List Bytes: 11218944, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 2531328, Memory Available Bytes: 579973120, Memory Commit Limit: 2146951168, Memory Transition Pages RePurposed sec: 25.73323177, Memory Pages Output sec: 0, Memory Page Reads sec: 0.133332807, Memory Demand Zero Faults sec: 236.1324014, Memory Available KBytes: 566380, Memory Pages sec: 0.399998421, Memory Cache Bytes: 13565952, Memory Pool Nonpaged Bytes: 50982912, Memory Page Faults sec: 266.465615, Memory Transition Faults sec: 31.13321046, Memory System Cache Resident Bytes: 13565952, Memory Standby Cache Reserve Bytes: 475512832, Memory Page Writes sec: 0, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 74334208, Memory System Driver Resident Bytes: 3059712, Memory Standby Cache Normal Priority Bytes: 18907136, Memory Pool Paged Allocs: 75691, Memory Pool Nonpaged Allocs: 57432, Memory pct_ Committed Bytes In Use: 39.24083959, Memory Free System Page Table Entries: 33557559, Memory Available MBytes: 553, Memory Modified Page List Bytes: 31211520, Memory Cache Faults sec: 1.399994475, Memory Committed Bytes: 842481664, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 0.399998421, Memory Pool Paged Resident Bytes: 30265344, Memory Write Copies sec: 0

[Assistant] normal


[User] src_ip: 192.168.1.194, src_port: 80, dst_ip: 192.168.1.194, dst_port: 1446, proto: tcp, service: -, duration: 0.224666, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 21, dst_ip: 192.168.1.190, dst_port: 21, proto: tcp, service: -, duration: 0.000414, src_bytes: 0, dst_bytes: 0, conn_state: RSTO, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 80, dst_pkts: 1, dst_ip_bytes: 44, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:08, motion_status: 0, light_status:  off

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 39938, dst_ip: 216.58.199.74, dst_port: 443, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: active_connection_reuse, weird_addl: -, weird_notice: F

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49585, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.000839, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time:    12:42:08   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] date: 31-Mar-19, time:    12:42:24   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 39006, dst_ip: 192.168.1.184, dst_port: 443, proto: tcp, service: -, duration: 61.339054, src_bytes: 0, dst_bytes: 0, conn_state: S3, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 2, dst_ip_bytes: 112, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 38092, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.000005, src_bytes: 52, dst_bytes: 52, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 80, dst_pkts: 1, dst_ip_bytes: 80, dns_query: 192.168.1.195/dvwa/login.php-r.hub, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: T, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:38:01, motion_status: 0, light_status:  off

[Assistant] normal


[User] PID: 4375, MINFLT: 1826, MAJFLT: 0, VSTEXT: 148, VSIZE: 17952, RSIZE: 2468, VGROW: 4, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 33368, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.019323, src_bytes: 54, dst_bytes: 132, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 110, dst_pkts: 2, dst_ip_bytes: 188, dns_query: s0.wp.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2265, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: gsd-houseeepi, attack: 1

[Assistant] attack


[User] date: 2-Apr-19, time:  04:06:50 , current_temperature: 26.3288487, thermostat_status: 1

[Assistant] normal


[User] date: 28-Apr-19, time:  04:53:51 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] date: 26-Apr-19, time: 15:36:02, fridge_temperature: 2.9, temp_condition: low

[Assistant] attack


[User] src_ip: 192.168.1.190, src_port: 13699, dst_ip: 216.239.36.10, dst_port: 53, proto: udp, service: dns, duration: 0.155737, src_bytes: 43, dst_bytes: 59, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 71, dst_pkts: 1, dst_ip_bytes: 87, dns_query: www.google.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: T, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] Processor_DPC_Rate: 192, Processor_pct_ Idle_Time: 59.7468442, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.234738667, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 11.03271733, Processor_pct_ C1_Time: 59.7468442, Processor_pct_ Processor_Time: 26.29205871, Processor_C1_ransitions_sec: 3908.848278, Processor_pct_ DPC_Time: 5.242496886, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 15.25801332, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 6293.9388, Processor_Interrupts_sec: 6132.889604, Process_Pool_Paged Bytes: 22204488, Process_IO Read_Operations_sec: 5.808988422, Process_Working_Set_ Private: 1770364928, Process_Working_Set_Peak: 6165905408, Process_IO_Write Operations_sec: 1.302014646, Process_Page_File Bytes: 5316370432, Process_pct_ User_Time: 22.06543465, Process_Virtual_Bytes Peak: 1.52E+14, Process_Page_File Bytes Peak: 7069536256, Process_IO_Other_Bytes_sec: 6016.108906, Process_Private_Bytes: 5316370432, Process_IO_Write_Bytes_sec: 6720.398674, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.52E+14, Process_pct_ Processor_Time: 189.0428728, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 3137672, Process_Working Set: 1854472192, Process_Page Faults_sec: 14829.24574, Process_ID Process: 0, Process_IO Other Operations_sec: 132.705339, Process_IO Data Operations_sec: 7.111003068, Process_Thread Count: 966, Process_pct_ Privileged_Time: 166.9774381, Process_IO Data Bytes_sec: 7893.213406, Process_IO Read Bytes_sec: 1172.814731, Process_Priority Base: 0, Process_Handle Count: 38619, Network_I(Intel R _82574L_GNC)TCP_APS: 5025, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4882.254459, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 266.3120727, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5148.566531, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 4.707283721, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 7.611777932, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 12.31906165, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 2, Network_I(Intel R _82574L_GNC) Packets Sent sec: 4.707283721, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 7.611777932, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 103759872, Memory Free & Zero Page List Bytes: 2064384, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 595054592, Memory Commit Limit: 8464515072, Memory Transition Pages RePurposed sec: 6598.710383, Memory Pages Output sec: 2443.080251, Memory Page Reads sec: 3232.702057, Memory Demand Zero Faults sec: 3395.654198, Memory Available KBytes: 581108, Memory Pages sec: 9294.28132, Memory Cache Bytes: 1081344, Memory Pool Nonpaged Bytes: 113549312, Memory Page Faults sec: 14858.6913, Memory Transition Faults sec: 4033.441064, Memory System Cache Resident Bytes: 1081344, Memory Long-Term Average Standby Cache Lifetime (s): 20, Memory Standby Cache Reserve Bytes: 337158144, Memory Page Writes sec: 161.7502811, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 194052096, Memory System Driver Resident Bytes: 1.76E+13, Memory Standby Cache Normal Priority Bytes: 61779968, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 73.64589562, Memory Free System Page Table Entries: 12216756, Memory Available MBytes: 567, Memory Modified Page List Bytes: 9269248, Memory Cache Faults sec: 1.80278951, Memory Committed Bytes: 6233767936, Memory System Driver Total Bytes: 18223104, Memory Pages Input sec: 6851.201069, Memory Pool Paged Resident Bytes: 22462464, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 61738.35062, LogicalDisk(_Total) pct_ Idle Time: 68.71390433, LogicalDisk(_Total) Disk Reads sec: 3199.550761, LogicalDisk(_Total) pct_ Free Space: 81.2990135, LogicalDisk(_Total) Disk Read Bytes sec: 28428910.51, LogicalDisk(_Total) Avg  Disk sec Read: 0.000547404, LogicalDisk(_Total) Disk Writes sec: 162.2510559, LogicalDisk(_Total) Current Disk Queue Length: 2, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 166389, LogicalDisk(_Total) Avg  Disk sec Write: 0.000262191, LogicalDisk(_Total) Disk Bytes sec: 38446023.08, LogicalDisk(_Total) Avg  Disk Read Queue Length: 1.751449115, LogicalDisk(_Total) pct_ Disk Time: 59.79966403, LogicalDisk(_Total) Avg  Disk Bytes Read: 8885.281913, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.042540796, LogicalDisk(_Total) Avg  Disk Queue Length: 1.793989911, LogicalDisk(_Total) pct_ Disk Read Time: 58.38163717, LogicalDisk(_Total) Disk Write Bytes sec: 10017112.58, LogicalDisk(_Total) Disk Transfers sec: 3361.801817, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 11436.13609, LogicalDisk(_Total) pct_ Disk Write Time: 1.418026864, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000533638

[Assistant] normal


[User] PID: 3623, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.33, src_port: 4444, dst_ip: 192.168.1.193, dst_port: 49223, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 168, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3197, MINFLT: 0, MAJFLT: 0, VSTEXT: 193, VSIZE: 2.3, RSIZE: 97768, VGROW: 0, RGROW: 0, MEM: 0.03, CMD: firefox

[Assistant] normal


[User] PID: 1368, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vmtoolsd, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 46818, dst_ip: 192.168.1.152, dst_port: 80, proto: tcp, service: http, duration: 74.467091, src_bytes: 1516, dst_bytes: 0, conn_state: RSTR, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 1836, dst_pkts: 4, dst_ip_bytes: 212, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time: 14:44:11, motion_status: 0, light_status:  off

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 39418, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.003735, src_bytes: 43, dst_bytes: 43, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 71, dst_pkts: 1, dst_ip_bytes: 71, dns_query: https://192.168.1.184.hub, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: T, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1400, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: irqbalance, attack: 0

[Assistant] normal


[User] PID: 6876, TRUN: 0, TSLPI: 0, TSLPU: 0, POLI: 0, NICE: 0, PRI: 0, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: E, CPU: 0, CMD: <apache2>

[Assistant] attack


[User] date: 1-Apr-19, time:   21:00:14   , fridge_temperature: 5.95, temp_condition: low

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:24, FC1_Read_Input_Register: 64646, FC2_Read_Discrete_Value: 51483, FC3_Read_Holding_Register: 59486, FC4_Read_Coil: 58441

[Assistant] normal


[User] date: 25-Apr-19, time: 8:23:15, motion_status: 1, light_status:  on

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:34, temperature: 26.48290414, pressure: 1.218850484, humidity: 57.39374054

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 78.62454988, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 19.68838066, Processor_pct_ C1_Time: 78.62454988, Processor_pct_ Processor_Time: 20.69957789, Processor_C1_ransitions_sec: 135.1057474, Processor_pct_ DPC_Time: 0, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 1.015670431, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 27.5011699, Processor_Interrupts_sec: 514.0218665, Process_Pool_Paged Bytes: 22226592, Process_IO Read_Operations_sec: 0, Process_Working_Set_ Private: 1634091008, Process_Working_Set_Peak: 5526970368, Process_IO_Write Operations_sec: 0, Process_Page_File Bytes: 2724597760, Process_pct_ User_Time: 39.37676132, Process_Virtual_Bytes Peak: 1.57E+14, Process_Page_File Bytes Peak: 3755819008, Process_IO_Other_Bytes_sec: 4848.306247, Process_Private_Bytes: 2724597760, Process_IO_Write_Bytes_sec: 0, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.57E+14, Process_pct_ Processor_Time: 200.0089464, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2311632, Process_Working Set: 2201735168, Process_Page Faults_sec: 374.6159362, Process_ID Process: 0, Process_IO Other Operations_sec: 68.00289284, Process_IO Data Operations_sec: 0, Process_Thread Count: 988, Process_pct_ Privileged_Time: 160.6321851, Process_IO Data Bytes_sec: 0, Process_IO Read Bytes_sec: 0, Process_Priority Base: 0, Process_Handle Count: 38931, Network_I(Intel R _82574L_GNC)TCP_APS: 5302, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4850.106324, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 303.4129072, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5153.519231, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 5.50023398, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 8.500361605, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 14.00059559, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 2, Network_I(Intel R _82574L_GNC) Packets Sent sec: 5.50023398, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 8.500361605, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 106696704, Memory Free & Zero Page List Bytes: 9158656, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 445423616, Memory Commit Limit: 8473149440, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 459.519548, Memory Available KBytes: 434984, Memory Pages sec: 0, Memory Cache Bytes: 13938688, Memory Pool Nonpaged Bytes: 88834048, Memory Page Faults sec: 374.6159362, Memory Transition Faults sec: 6.400272268, Memory System Cache Resident Bytes: 13938688, Memory Long-Term Average Standby Cache Lifetime (s): 20, Memory Standby Cache Reserve Bytes: 127901696, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 161935360, Memory System Driver Resident Bytes: 4169728, Memory Standby Cache Normal Priority Bytes: 146427904, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 42.04719042, Memory Free System Page Table Entries: 12210428, Memory Available MBytes: 424, Memory Modified Page List Bytes: 9969664, Memory Cache Faults sec: 0, Memory Committed Bytes: 3562721280, Memory System Driver Total Bytes: 18202624, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 70131712, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 0, LogicalDisk(_Total) pct_ Idle Time: 100.000255, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 81.31464896, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 0, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 166421, LogicalDisk(_Total) Avg  Disk sec Write: 0, LogicalDisk(_Total) Disk Bytes sec: 0, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0, LogicalDisk(_Total) Avg  Disk Queue Length: 0, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 0, LogicalDisk(_Total) Disk Transfers sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 0, LogicalDisk(_Total) pct_ Disk Write Time: 0, LogicalDisk(_Total) Avg  Disk sec Transfer: 0

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 39707, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.00003, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 3390, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: ostinato, attack: 1

[Assistant] attack


[User] date: 25-Apr-19, time:  10:09:45 , FC1_Read_Input_Register: 56991, FC2_Read_Discrete_Value: 60930, FC3_Read_Holding_Register: 60920, FC4_Read_Coil: 53597

[Assistant] attack


[User] PID: 2420, MINFLT: 0, MAJFLT: 0, VSTEXT: 415, VSIZE: 40212, RSIZE: 2056, VGROW: 0, RGROW: 4, MEM: 0, CMD: dbus-daemon

[Assistant] normal


[User] PID: 1371, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: irqbalance

[Assistant] normal


[User] PID: 1864, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vmtoolsd, attack: 1

[Assistant] attack


[User] PID: 2017, TRUN: 0, TSLPI: 2, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: Xorg

[Assistant] attack


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 60.06290786, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.078005792, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 28.16009075, Processor_pct_ C1_Time: 60.06290786, Processor_pct_ Processor_Time: 36.81530885, Processor_C1_ransitions_sec: 212.3730072, Processor_pct_ DPC_Time: 0.234017375, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 8.658642862, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 112.4268952, Processor_Interrupts_sec: 688.2403095, Process_Pool_Paged Bytes: 33705208, Process_IO Read_Operations_sec: 348.5633136, Process_Working_Set_ Private: 967831552, Process_Working_Set_Peak: 5241810944, Process_IO_Write Operations_sec: 20.9677158, Process_Page_File Bytes: 3136942080, Process_pct_ User_Time: 50.23572976, Process_Virtual_Bytes Peak: 2.78E+14, Process_Page_File Bytes Peak: 3823595520, Process_IO_Other_Bytes_sec: 37093.0874, Process_Private_Bytes: 3136942080, Process_IO_Write_Bytes_sec: 34562.08441, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 2.78E+14, Process_pct_ Processor_Time: 186.5898534, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 3186768, Process_Working Set: 2549993472, Process_Page Faults_sec: 104.0398089, Process_ID Process: 0, Process_IO Other Operations_sec: 557.9409328, Process_IO Data Operations_sec: 369.5310294, Process_Thread Count: 1684, Process_pct_ Privileged_Time: 136.3541236, Process_IO Data Bytes_sec: 982450.7108, Process_IO Read Bytes_sec: 947888.6264, Process_Priority Base: 0, Process_Handle Count: 57924, Network_I(Intel R _82574L_GNC)TCP_APS: 6325, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 32155.58972, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 24888.17942, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 57043.76914, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 54.21652228, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 63.40237872, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 117.618901, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 39, Network_I(Intel R _82574L_GNC) Packets Sent sec: 54.21652228, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 63.40237872, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 143241216, Memory Free & Zero Page List Bytes: 203370496, Memory Cache Bytes Peak: 73678848, Memory System Code Resident Bytes: 0, Memory Available Bytes: 780472320, Memory Commit Limit: 6038605824, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0.499231329, Memory Demand Zero Faults sec: 976.4964786, Memory Available KBytes: 762180, Memory Pages sec: 3.294926768, Memory Cache Bytes: 24547328, Memory Pool Nonpaged Bytes: 133148672, Memory Page Faults sec: 1521.557243, Memory Transition Faults sec: 619.2465399, Memory System Cache Resident Bytes: 24547328, Memory Long-Term Average Standby Cache Lifetime (s): 14400, Memory Standby Cache Reserve Bytes: 180920320, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 217550848, Memory System Driver Resident Bytes: 1.76E+13, Memory Standby Cache Normal Priority Bytes: 178630656, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 88.96578573, Memory Free System Page Table Entries: 12255652, Memory Available MBytes: 744, Memory Modified Page List Bytes: 1609728, Memory Cache Faults sec: 10.4838579, Memory Committed Bytes: 5372293120, Memory System Driver Total Bytes: 25550848, Memory Pages Input sec: 3.294926768, Memory Pool Paged Resident Bytes: 84254720, Memory Write Copies sec: 0.299538797, LogicalDisk(_Total) Avg  Disk Bytes Write: 16539.82609, LogicalDisk(_Total) pct_ Idle Time: 99.95268231, LogicalDisk(_Total) Disk Reads sec: 0.299538797, LogicalDisk(_Total) pct_ Free Space: 81.36253255, LogicalDisk(_Total) Disk Read Bytes sec: 8179.406087, LogicalDisk(_Total) Avg  Disk sec Read: 0.000811833, LogicalDisk(_Total) Disk Writes sec: 4.592928222, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.599077594, LogicalDisk(_Total) Free Megabytes: 166519, LogicalDisk(_Total) Avg  Disk sec Write: 0.000361478, LogicalDisk(_Total) Disk Bytes sec: 84145.64012, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.000243178, LogicalDisk(_Total) pct_ Disk Time: 0.063448039, LogicalDisk(_Total) Avg  Disk Bytes Read: 27306.66667, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.001660263, LogicalDisk(_Total) Avg  Disk Queue Length: 0.001903441, LogicalDisk(_Total) pct_ Disk Read Time: 0.008105613, LogicalDisk(_Total) Disk Write Bytes sec: 75966.23403, LogicalDisk(_Total) Disk Transfers sec: 4.89246702, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 17199.02041, LogicalDisk(_Total) pct_ Disk Write Time: 0.055342426, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000389051

[Assistant] attack


[User] PID: 3897, RDDSK: 0, WRDSK: 20, WCANCL: 0, DSK: 0.19, CMD: atop, attack: 0

[Assistant] normal


[User] date: 31-Mar-19, time:    12:39:35   , fridge_temperature: 9.1, temp_condition: high

[Assistant] normal


[User] PID: 1442, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: Xorg

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:33, latitude: 2.895208125, longitude: 13.01008487

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 37913, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.002515, src_bytes: 84, dst_bytes: 436, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 140, dst_pkts: 2, dst_ip_bytes: 492, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 1704, dst_ip: 192.168.1.152, dst_port: 1704, proto: tcp, service: -, duration: 0.28921, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 36261, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000019, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 2-Apr-19, time:  04:04:03 , current_temperature: 30.36930869, thermostat_status: 0

[Assistant] normal


[User] date: 31-Mar-19, time:    12:42:02   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 35, dst_ip: 192.168.1.152, dst_port: 35, proto: tcp, service: -, duration: 0.00368, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2797, MINFLT: 13, MAJFLT: 0, VSTEXT: 1350, VSIZE: 1.4, RSIZE: 95968, VGROW: 0, RGROW: 0, MEM: 0.03, CMD: nautilus

[Assistant] normal


[User] Processor(_Total) DPC Rate: 17, Processor(_Total) pct_ Idle Time: 65.42092557, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.312520345, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 7.292141385, Processor(_Total) pct_ C1 Time: 66.67100695, Processor(_Total) pct_ Processor Time: 34.57907443, Processor(_Total) C1 Transitions sec: 3922.182015, Processor(_Total) pct_ DPC Time: 0.104173448, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 27.29344347, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 4137.525342, Processor(_Total) Interrupts sec: 5609.593656, Process(_Total) Pool Paged Bytes: 8007200, Process(_Total) IO Read Operations sec: 20.06759794, Process(_Total) Working Set - Private: 751927296, Process(_Total) Working Set Peak: 2072010752, Process(_Total) IO Write Operations sec: 32.73485245, Process(_Total) Page File Bytes: 1988534272, Process(_Total) pct_ User Time: 7.292141385, Process(_Total) Virtual Bytes Peak: 8112455680, Process(_Total) Page File Bytes Peak: 2315104256, Process(_Total) IO Other Bytes sec: 8872.21173, Process(_Total) Private Bytes: 1988534272, Process(_Total) IO Write Bytes sec: 26871.71369, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6977359872, Process(_Total) pct_ Processor Time: 99.58981663, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1189088, Process(_Total) Working Set: 816500736, Process(_Total) Page Faults sec: 5248.310223, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 416.9526827, Process(_Total) IO Data Operations sec: 52.80245039, Process(_Total) Thread Count: 571, Process(_Total) pct_ Privileged Time: 92.29767525, Process(_Total) IO Data Bytes sec: 53124.99869, Process(_Total) IO Read Bytes sec: 26253.28499, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 14108, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 11967.95539, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 172.4746706, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 12140.43006, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 3.000139226, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 9.06708744, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 12.06722667, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 3.000139226, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 9.06708744, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 97325056, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 80883712, Memory System Code Resident Bytes: 991232, Memory Available Bytes: 2523136, Memory Commit Limit: 2584522752, Memory Transition Pages RePurposed sec: 6113.350367, Memory Pages Output sec: 4523.676595, Memory Page Reads sec: 3370.956435, Memory Demand Zero Faults sec: 463.5548454, Memory Available KBytes: 2464, Memory Pages sec: 11419.72995, Memory Cache Bytes: 503808, Memory Pool Nonpaged Bytes: 56995840, Memory Page Faults sec: 5470.720545, Memory Transition Faults sec: 1637.34265, Memory System Cache Resident Bytes: 503808, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 1020.647365, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 520192, Memory System Driver Resident Bytes: 1679360, Memory Standby Cache Normal Priority Bytes: 2002944, Memory Pool Paged Allocs: 62093, Memory Pool Nonpaged Allocs: 53661, Memory pct_ Committed Bytes In Use: 90.87318756, Memory Free System Page Table Entries: 33563833, Memory Available MBytes: 2, Memory Modified Page List Bytes: 32768, Memory Cache Faults sec: 0.933376648, Memory Committed Bytes: 2348638208, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 6896.053356, Memory Pool Paged Resident Bytes: 10510336, Memory Write Copies sec: 0

[Assistant] normal


[User] src_ip: 192.168.1.195, src_port: 1192, dst_ip: 192.168.1.195, dst_port: 1192, proto: tcp, service: -, duration: 0.250072, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 3103, MINFLT: 0, MAJFLT: 0, VSTEXT: 2132, VSIZE: 2.5, RSIZE: 28092, VGROW: 0, RGROW: 0, MEM: 0.01, CMD: ostinato

[Assistant] attack


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 64.81511812, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.234378403, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 25.46911981, Processor_pct_ C1_Time: 64.81511812, Processor_pct_ Processor_Time: 34.13966871, Processor_C1_ransitions_sec: 165.4014489, Processor_pct_ DPC_Time: 0.078126134, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 8.672000917, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 35.80031361, Processor_Interrupts_sec: 3269.628642, Process_Pool_Paged Bytes: 22019592, Process_IO Read_Operations_sec: 3.600031536, Process_Working_Set_ Private: 1612431360, Process_Working_Set_Peak: 5808381952, Process_IO_Write Operations_sec: 0.100000876, Process_Page_File Bytes: 3059326976, Process_pct_ User_Time: 50.93823962, Process_Virtual_Bytes Peak: 1.52E+14, Process_Page_File Bytes Peak: 4106878976, Process_IO_Other_Bytes_sec: 4552.139877, Process_Private_Bytes: 3059326976, Process_IO_Write_Bytes_sec: 3276.828705, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.52E+14, Process_pct_ Processor_Time: 199.377895, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2373128, Process_Working Set: 1883508736, Process_Page Faults_sec: 5462.747854, Process_ID Process: 0, Process_IO Other Operations_sec: 89.2007814, Process_IO Data Operations_sec: 3.700032412, Process_Thread Count: 971, Process_pct_ Privileged_Time: 148.4396553, Process_IO Data Bytes_sec: 4201.836808, Process_IO Read Bytes_sec: 925.0081031, Process_Priority Base: 0, Process_Handle Count: 38386, Network_I(Intel R _82574L_GNC)TCP_APS: 5270, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 5137.845008, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 257.0022513, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5394.847259, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 4.700041172, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 9.400082345, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 14.10012352, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 2, Network_I(Intel R _82574L_GNC) Packets Sent sec: 4.700041172, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 9.400082345, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 103981056, Memory Free & Zero Page List Bytes: 4501504, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 599965696, Memory Commit Limit: 8473149440, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 42.80037493, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 2253.119737, Memory Available KBytes: 585904, Memory Pages sec: 42.80037493, Memory Cache Bytes: 1986560, Memory Pool Nonpaged Bytes: 93429760, Memory Page Faults sec: 5465.947882, Memory Transition Faults sec: 3397.729764, Memory System Cache Resident Bytes: 1986560, Memory Long-Term Average Standby Cache Lifetime (s): 2626, Memory Standby Cache Reserve Bytes: 222208000, Memory Page Writes sec: 2.300020148, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 177844224, Memory System Driver Resident Bytes: 106496, Memory Standby Cache Normal Priority Bytes: 195411968, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 45.96817231, Memory Free System Page Table Entries: 12210295, Memory Available MBytes: 572, Memory Modified Page List Bytes: 29343744, Memory Cache Faults sec: 1.800015768, Memory Committed Bytes: 3894951936, Memory System Driver Total Bytes: 18202624, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 35414016, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 65097.14286, LogicalDisk(_Total) pct_ Idle Time: 99.96702552, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 81.30683123, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 2.800024528, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 166405, LogicalDisk(_Total) Avg  Disk sec Write: 0.000462832, LogicalDisk(_Total) Disk Bytes sec: 182273.5967, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.043198627, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.001295949, LogicalDisk(_Total) Avg  Disk Queue Length: 0.001295949, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 182273.5967, LogicalDisk(_Total) Disk Transfers sec: 2.800024528, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 65097.14286, LogicalDisk(_Total) pct_ Disk Write Time: 0.043197627, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000462832

[Assistant] normal


[User] Processor_DPC_Rate: 3, Processor_pct_ Idle_Time: 67.33836305, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 25.82189883, Processor_pct_ C1_Time: 67.33836305, Processor_pct_ Processor_Time: 30.59386586, Processor_C1_ransitions_sec: 455.0140444, Processor_pct_ DPC_Time: 0.312992713, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 4.773138875, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 205.7228367, Processor_Interrupts_sec: 1600.311337, Process_Pool_Paged Bytes: 22237848, Process_IO Read_Operations_sec: 0, Process_Working_Set_ Private: 1835241472, Process_Working_Set_Peak: 5983821824, Process_IO_Write Operations_sec: 0, Process_Page_File Bytes: 3340488704, Process_pct_ User_Time: 51.64379767, Process_Virtual_Bytes Peak: 1.52E+14, Process_Page_File Bytes Peak: 4361105408, Process_IO_Other_Bytes_sec: 2756.625918, Process_Private_Bytes: 3340488704, Process_IO_Write_Bytes_sec: 0, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.52E+14, Process_pct_ Processor_Time: 199.3763583, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2449400, Process_Working Set: 1966563328, Process_Page Faults_sec: 5985.693229, Process_ID Process: 0, Process_IO Other Operations_sec: 44.87041424, Process_IO Data Operations_sec: 0, Process_Thread Count: 1016, Process_pct_ Privileged_Time: 147.7325606, Process_IO Data Bytes_sec: 0, Process_IO Read Bytes_sec: 0, Process_Priority Base: 0, Process_Handle Count: 39023, Network_I(Intel R _82574L_GNC)TCP_APS: 4830, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4823.97016, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 254.1989093, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5078.169069, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 4.707387209, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 6.610373527, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 11.31776074, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 1, Network_I(Intel R _82574L_GNC) Packets Sent sec: 4.707387209, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 6.610373527, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 109907968, Memory Free & Zero Page List Bytes: 10711040, Memory Cache Bytes Peak: 157425664, Memory System Code Resident Bytes: 0, Memory Available Bytes: 477245440, Memory Commit Limit: 8459894784, Memory Transition Pages RePurposed sec: 1096.120119, Memory Pages Output sec: 311.0881845, Memory Page Reads sec: 158.2483359, Memory Demand Zero Faults sec: 871.667891, Memory Available KBytes: 466060, Memory Pages sec: 1299.539341, Memory Cache Bytes: 1048576, Memory Pool Nonpaged Bytes: 102227968, Memory Page Faults sec: 5986.194015, Memory Transition Faults sec: 3678.472553, Memory System Cache Resident Bytes: 1048576, Memory Long-Term Average Standby Cache Lifetime (s): 472, Memory Standby Cache Reserve Bytes: 66699264, Memory Page Writes sec: 6.410059178, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 191520768, Memory System Driver Resident Bytes: 1.76E+13, Memory Standby Cache Normal Priority Bytes: 208314368, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 50.05451717, Memory Free System Page Table Entries: 12211264, Memory Available MBytes: 455, Memory Modified Page List Bytes: 11038720, Memory Cache Faults sec: 0, Memory Committed Bytes: 4234559488, Memory System Driver Total Bytes: 18259968, Memory Pages Input sec: 988.4511566, Memory Pool Paged Resident Bytes: 25100288, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 190311.1642, LogicalDisk(_Total) pct_ Idle Time: 98.39925611, LogicalDisk(_Total) Disk Reads sec: 158.2483359, LogicalDisk(_Total) pct_ Free Space: 81.26383372, LogicalDisk(_Total) Disk Read Bytes sec: 4048695.938, LogicalDisk(_Total) Avg  Disk sec Read: 0.000282045, LogicalDisk(_Total) Disk Writes sec: 6.710530702, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 166317, LogicalDisk(_Total) Avg  Disk sec Write: 0.000723234, LogicalDisk(_Total) Disk Bytes sec: 5325784.848, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.044633332, LogicalDisk(_Total) pct_ Disk Time: 1.649554729, LogicalDisk(_Total) Avg  Disk Bytes Read: 25584.44557, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.00485331, LogicalDisk(_Total) Avg  Disk Queue Length: 0.049486642, LogicalDisk(_Total) pct_ Disk Read Time: 1.48777806, LogicalDisk(_Total) Disk Write Bytes sec: 1277088.91, LogicalDisk(_Total) Disk Transfers sec: 164.9588667, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 32285.53248, LogicalDisk(_Total) pct_ Disk Write Time: 0.161776669, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000299992

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:03, FC1_Read_Input_Register: 45548, FC2_Read_Discrete_Value: 56120, FC3_Read_Holding_Register: 25789, FC4_Read_Coil: 9232

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 53342, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.004732, src_bytes: 168, dst_bytes: 436, conn_state: SF, missed_bytes: 0, src_pkts: 4, src_ip_bytes: 280, dst_pkts: 2, dst_ip_bytes: 492, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 15070, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <imap-login>, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 44735, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.14529, src_bytes: 84, dst_bytes: 848, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 140, dst_pkts: 4, dst_ip_bytes: 960, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 4375, MINFLT: 2065, MAJFLT: 0, VSTEXT: 148, VSIZE: 17952, RSIZE: 2468, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.195, src_port: 50166, dst_ip: 8.8.8.8, dst_port: 53, proto: udp, service: dns, duration: 0.139943, src_bytes: 40, dst_bytes: 134, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 68, dst_pkts: 1, dst_ip_bytes: 162, dns_query: iecvlist.microsoft.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 4470, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0.02, CMD: tcpdump

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 47500, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000017, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 25-Apr-19, time: 9:13:19, current_temperature: 32.39243882, thermostat_status: 0

[Assistant] attack


[User] date: 1-Apr-19, time:  18:17:53 , latitude: 107.2988708, longitude: 119.0510439

[Assistant] normal


[User] PID: 3081, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 10, PRI: 130, RTPR: 0, CPUNR: 1, Status: 0, EXC: 0, State: S, CPU: 0.02, CMD: update-manager

[Assistant] attack


[User] Processor(_Total) DPC Rate: 0, Processor(_Total) pct_ Idle Time: 99.79166667, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.104166667, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 0, Processor(_Total) pct_ C1 Time: 100, Processor(_Total) pct_ Processor Time: 0.208333333, Processor(_Total) C1 Transitions sec: 64.53711048, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 0.208333333, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 1.066729099, Processor(_Total) Interrupts sec: 66.87058038, Process(_Total) Pool Paged Bytes: 4942248, Process(_Total) IO Read Operations sec: 1.466752511, Process(_Total) Working Set - Private: 163876864, Process(_Total) Working Set Peak: 926412800, Process(_Total) IO Write Operations sec: 0.933387961, Process(_Total) Page File Bytes: 526233600, Process(_Total) pct_ User Time: 0, Process(_Total) Virtual Bytes Peak: 4130967552, Process(_Total) Page File Bytes Peak: 748625920, Process(_Total) IO Other Bytes sec: 950.0556036, Process(_Total) Private Bytes: 526233600, Process(_Total) IO Write Bytes sec: 4493.462987, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 3335286784, Process(_Total) pct_ Processor Time: 99.89583333, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 704048, Process(_Total) Working Set: 448299008, Process(_Total) Page Faults sec: 79.27130615, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 51.86970243, Process(_Total) IO Data Operations sec: 2.400140472, Process(_Total) Thread Count: 429, Process(_Total) pct_ Privileged Time: 99.89583333, Process(_Total) IO Data Bytes sec: 4637.871439, Process(_Total) IO Read Bytes sec: 144.4084517, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 10932, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 0, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 0, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 0, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 0, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 0, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 0, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 0, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 0, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 97861632, Memory Free & Zero Page List Bytes: 11415552, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 2060288, Memory Available Bytes: 580612096, Memory Commit Limit: 2146951168, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 78.47125933, Memory Available KBytes: 567004, Memory Pages sec: 0, Memory Cache Bytes: 13344768, Memory Pool Nonpaged Bytes: 50987008, Memory Page Faults sec: 81.47143492, Memory Transition Faults sec: 3.200187296, Memory System Cache Resident Bytes: 13344768, Memory Standby Cache Reserve Bytes: 475955200, Memory Page Writes sec: 0, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 74334208, Memory System Driver Resident Bytes: 3059712, Memory Standby Cache Normal Priority Bytes: 18907136, Memory Pool Paged Allocs: 75665, Memory Pool Nonpaged Allocs: 57404, Memory pct_ Committed Bytes In Use: 39.19085467, Memory Free System Page Table Entries: 33557559, Memory Available MBytes: 553, Memory Modified Page List Bytes: 31793152, Memory Cache Faults sec: 0, Memory Committed Bytes: 841408512, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 30150656, Memory Write Copies sec: 0

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 91, dst_ip: 192.168.1.194, dst_port: 91, proto: tcp, service: -, duration: 0.000007, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3752, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: gnome-terminal, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 48336, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.147063, src_bytes: 78, dst_bytes: 278, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 134, dst_pkts: 2, dst_ip_bytes: 334, dns_query: a.impactradius-go.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  10:43:51 , FC1_Read_Input_Register: 21431, FC2_Read_Discrete_Value: 7022, FC3_Read_Holding_Register: 61932, FC4_Read_Coil: 7890

[Assistant] attack


[User] PID: 2809, MINFLT: 0, MAJFLT: 0, VSTEXT: 36, VSIZE: 381, RSIZE: 2460, VGROW: 0, RGROW: 0, MEM: 0, CMD: vmtoolsd

[Assistant] normal


[User] PID: 3257, TRUN: 1, TSLPI: 21, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0.15, CMD: Web-Content

[Assistant] normal


[User] date: 2-Apr-19, time:    04:07:02   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 3, dst_ip: 192.168.1.1, dst_port: 3, proto: icmp, service: -, duration: 0.000165, src_bytes: 492, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 548, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2431, MINFLT: 0, MAJFLT: 0, VSTEXT: 115, VSIZE: 22300, RSIZE: 1164, VGROW: 0, RGROW: 0, MEM: 0, CMD: upstart-event-

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 1880, dst_ip: 192.168.1.152, dst_port: 51782, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 37984, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: -, duration: 0.000788, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 60534, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.020376, src_bytes: 168, dst_bytes: 436, conn_state: SF, missed_bytes: 0, src_pkts: 4, src_ip_bytes: 280, dst_pkts: 2, dst_ip_bytes: 492, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3790, MINFLT: 0, MAJFLT: 0, VSTEXT: 2132, VSIZE: 2.4, RSIZE: 25172, VGROW: 0, RGROW: 0, MEM: 0.01, CMD: ostinato

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 34870, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.002103, src_bytes: 58, dst_bytes: 58, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 86, dst_pkts: 1, dst_ip_bytes: 86, dns_query: testphp.vulnweb.com/listproducts.php.hub, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: T, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] Processor(_Total) DPC Rate: 84, Processor(_Total) pct_ Idle Time: 77.70327433, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 0.624959311, Processor(_Total) pct_ C1 Time: 79.99479181, Processor(_Total) pct_ Processor Time: 22.29672567, Processor(_Total) C1 Transitions sec: 3504.47927, Processor(_Total) pct_ DPC Time: 0.833279081, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 21.66525611, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 3305.88989, Processor(_Total) Interrupts sec: 4496.492891, Process(_Total) Pool Paged Bytes: 7921904, Process(_Total) IO Read Operations sec: 2.133219263, Process(_Total) Working Set - Private: 792109056, Process(_Total) Working Set Peak: 2018717696, Process(_Total) IO Write Operations sec: 1.533251345, Process(_Total) Page File Bytes: 2071478272, Process(_Total) pct_ User Time: 0.624959311, Process(_Total) Virtual Bytes Peak: 8100364288, Process(_Total) Page File Bytes Peak: 2705174528, Process(_Total) IO Other Bytes sec: 2059.489872, Process(_Total) Private Bytes: 2071478272, Process(_Total) IO Write Bytes sec: 789.1578011, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6796832768, Process(_Total) pct_ Processor Time: 99.16021068, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1055320, Process(_Total) Working Set: 847343616, Process(_Total) Page Faults sec: 4098.180857, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 103.5277974, Process(_Total) IO Data Operations sec: 3.666470608, Process(_Total) Thread Count: 566, Process(_Total) pct_ Privileged Time: 98.53525136, Process(_Total) IO Data Bytes sec: 1028.611663, Process(_Total) IO Read Bytes sec: 239.4538623, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13775, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 77.46252449, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 72.72944425, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 150.1919687, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 0.99994653, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 0.99994653, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 1.999893059, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 0.99994653, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 0.99994653, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 92684288, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 798720, Memory Available Bytes: 847872, Memory Commit Limit: 2918703104, Memory Transition Pages RePurposed sec: 5539.770437, Memory Pages Output sec: 2748.119716, Memory Page Reads sec: 3008.839107, Memory Demand Zero Faults sec: 89.86186145, Memory Available KBytes: 828, Memory Pages sec: 8889.7913, Memory Cache Bytes: 389120, Memory Pool Nonpaged Bytes: 69517312, Memory Page Faults sec: 4196.642258, Memory Transition Faults sec: 1100.941129, Memory System Cache Resident Bytes: 389120, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 321.4494777, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 626688, Memory System Driver Resident Bytes: 1224704, Memory Standby Cache Normal Priority Bytes: 221184, Memory Pool Paged Allocs: 58920, Memory Pool Nonpaged Allocs: 55520, Memory pct_ Committed Bytes In Use: 83.38095412, Memory Free System Page Table Entries: 33562140, Memory Available MBytes: 0, Memory Modified Page List Bytes: 57344, Memory Cache Faults sec: 0.399978612, Memory Committed Bytes: 2433642496, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 6141.671584, Memory Pool Paged Resident Bytes: 9834496, Memory Write Copies sec: 0.066663102

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49881, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000163, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3675, MINFLT: 2076, MAJFLT: 0, VSTEXT: 148, VSIZE: 17948, RSIZE: 2604, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] date: 28-Apr-19, time:  04:39:42 , latitude: 24.57932228, longitude: 35.57975102

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 27, dst_ip: 192.168.1.184, dst_port: 27, proto: tcp, service: -, duration: 0.000011, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.180, src_port: 38161, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000636, src_bytes: 41, dst_bytes: 89, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 69, dst_pkts: 1, dst_ip_bytes: 117, dns_query: elasticsearch.mydns.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 2823, TRUN: 0, TSLPI: 11, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0.03, CMD: node-red

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 54020, dst_ip: 192.168.1.190, dst_port: 139, proto: tcp, service: -, duration: 0.000222, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2794, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: nautilus, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 55878, dst_ip: 52.28.231.150, dst_port: 80, proto: tcp, service: -, duration: 3.046475, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 3, src_ip_bytes: 180, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:    04:04:13   , fridge_temperature: 9.25, temp_condition: high

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 53344, dst_ip: 52.59.177.21, dst_port: 80, proto: tcp, service: http, duration: 1.324259, src_bytes: 265, dst_bytes: 12183, conn_state: SF, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 585, dst_pkts: 12, dst_ip_bytes: 12815, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 52322, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.003872, src_bytes: 84, dst_bytes: 436, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 140, dst_pkts: 2, dst_ip_bytes: 492, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:    04:05:16   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:38, current_temperature: 26.1810534, thermostat_status: 1

[Assistant] normal


[User] date: 26-Apr-19, time: 13:52:43, motion_status: 0, light_status:  off

[Assistant] attack


[User] date: 2-Apr-19, time:  04:06:11 , current_temperature: 32.41143472, thermostat_status: 1

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 34296, dst_ip: 192.168.1.152, dst_port: 10502, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 2887, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: evolution-cale, attack: 0

[Assistant] normal


[User] date: 2-Apr-19, time:    04:01:24   , fridge_temperature: 6.65, temp_condition: high

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 96.81496428, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.078124233, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 0.156248466, Processor_pct_ C1_Time: 96.81496428, Processor_pct_ Processor_Time: 0.860348551, Processor_C1_ransitions_sec: 446.1949848, Processor_pct_ DPC_Time: 0, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 0.703118095, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 117.9986737, Processor_Interrupts_sec: 527.8940665, Process_Pool_Paged Bytes: 33115392, Process_IO Read_Operations_sec: 0.599993256, Process_Working_Set_ Private: 737841152, Process_Working_Set_Peak: 4634091520, Process_IO_Write Operations_sec: 2.4999719, Process_Page_File Bytes: 1896214528, Process_pct_ User_Time: 0.312496931, Process_Virtual_Bytes Peak: 2.58E+14, Process_Page_File Bytes Peak: 2710548480, Process_IO_Other_Bytes_sec: 6786.323722, Process_Private_Bytes: 1896214528, Process_IO_Write_Bytes_sec: 72253.18787, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 2.58E+14, Process_pct_ Processor_Time: 199.8417876, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 3370112, Process_Working Set: 2077536256, Process_Page Faults_sec: 817.3908125, Process_ID Process: 0, Process_IO Other Operations_sec: 126.9985725, Process_IO Data Operations_sec: 3.099965156, Process_Thread Count: 1610, Process_pct_ Privileged_Time: 199.5292906, Process_IO Data Bytes_sec: 72287.98748, Process_IO Read Bytes_sec: 34.79960885, Process_Priority Base: 0, Process_Handle Count: 55117, Network_I(Intel R _82574L_GNC)TCP_APS: 12424, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 7286.818096, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 4.199952793, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 7291.018049, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 0.099998876, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 112.6987333, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 112.7987321, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 5, Network_I(Intel R _82574L_GNC) Packets Sent sec: 0.099998876, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 112.6987333, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 178417664, Memory Free & Zero Page List Bytes: 514564096, Memory Cache Bytes Peak: 279379968, Memory System Code Resident Bytes: 0, Memory Available Bytes: 1778192384, Memory Commit Limit: 5770170368, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 183.9979319, Memory Available KBytes: 1736516, Memory Pages sec: 0, Memory Cache Bytes: 27299840, Memory Pool Nonpaged Bytes: 101924864, Memory Page Faults sec: 817.4908114, Memory Transition Faults sec: 661.8925603, Memory System Cache Resident Bytes: 27299840, Memory Long-Term Average Standby Cache Lifetime (s): 14400, Memory Standby Cache Reserve Bytes: 845955072, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 208666624, Memory System Driver Resident Bytes: 2596864, Memory Standby Cache Normal Priority Bytes: 209006592, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 58.30437705, Memory Free System Page Table Entries: 4294967295, Memory Available MBytes: 1695, Memory Modified Page List Bytes: 8806400, Memory Cache Faults sec: 0.099998876, Memory Committed Bytes: 3364261888, Memory System Driver Total Bytes: 20971520, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 111161344, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 38424.38095, LogicalDisk(_Total) pct_ Idle Time: 99.97251227, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 81.80667732, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 2.099976396, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 167428, LogicalDisk(_Total) Avg  Disk sec Write: 0.000388071, LogicalDisk(_Total) Disk Bytes sec: 80690.29304, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.027164733, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000814942, LogicalDisk(_Total) Avg  Disk Queue Length: 0.000814942, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 80690.29304, LogicalDisk(_Total) Disk Transfers sec: 2.099976396, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 38424.38095, LogicalDisk(_Total) pct_ Disk Write Time: 0.027164733, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000388071

[Assistant] attack


[User] src_ip: 192.168.1.33, src_port: 38559, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 103, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 35182, dst_ip: 192.168.1.184, dst_port: 443, proto: tcp, service: -, duration: 60.645372, src_bytes: 0, dst_bytes: 0, conn_state: S3, missed_bytes: 0, src_pkts: 3, src_ip_bytes: 164, dst_pkts: 2, dst_ip_bytes: 112, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 53482, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.058993, src_bytes: 86, dst_bytes: 216, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 142, dst_pkts: 2, dst_ip_bytes: 272, dns_query: tpc.googlesyndication.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack