[User] Processor(_Total) DPC Rate: 52, Processor(_Total) pct_ Idle Time: 70.72916667, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 1.979166667, Processor(_Total) pct_ C1 Time: 66.66666667, Processor(_Total) pct_ Processor Time: 29.27083333, Processor(_Total) C1 Transitions sec: 3402.901913, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 27.29166667, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 3465.568001, Processor(_Total) Interrupts sec: 4771.022614, Process(_Total) Pool Paged Bytes: 7925312, Process(_Total) IO Read Operations sec: 14.26653494, Process(_Total) Working Set - Private: 734679040, Process(_Total) Working Set Peak: 2059137024, Process(_Total) IO Write Operations sec: 8.133258236, Process(_Total) Page File Bytes: 1921863680, Process(_Total) pct_ User Time: 1.979166667, Process(_Total) Virtual Bytes Peak: 8028741632, Process(_Total) Page File Bytes Peak: 2279088128, Process(_Total) IO Other Bytes sec: 2096.247311, Process(_Total) Private Bytes: 1921863680, Process(_Total) IO Write Bytes sec: 6384.541049, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6887026688, Process(_Total) pct_ Processor Time: 100, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1045640, Process(_Total) Working Set: 798752768, Process(_Total) Page Faults sec: 6762.270895, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 91.53248818, Process(_Total) IO Data Operations sec: 22.39979318, Process(_Total) Thread Count: 545, Process(_Total) pct_ Privileged Time: 98.02083333, Process(_Total) IO Data Bytes sec: 12214.22056, Process(_Total) IO Read Bytes sec: 5829.679506, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13946, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 2794.774195, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 190.9315704, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 2985.705765, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 3.133304402, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 5.999944601, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 9.133249003, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 3.133304402, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 5.999944601, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 97808384, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 80883712, Memory System Code Resident Bytes: 856064, Memory Available Bytes: 15376384, Memory Commit Limit: 2533908480, Memory Transition Pages RePurposed sec: 9069.849588, Memory Pages Output sec: 4596.02423, Memory Page Reads sec: 2935.506229, Memory Demand Zero Faults sec: 1171.722514, Memory Available KBytes: 15016, Memory Pages sec: 15253.05916, Memory Cache Bytes: 638976, Memory Pool Nonpaged Bytes: 56688640, Memory Page Faults sec: 6907.336222, Memory Transition Faults sec: 2818.573975, Memory System Cache Resident Bytes: 638976, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 651.4606515, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 12922880, Memory System Driver Resident Bytes: 1409024, Memory Standby Cache Normal Priority Bytes: 2453504, Memory Pool Paged Allocs: 62314, Memory Pool Nonpaged Allocs: 53589, Memory pct_ Committed Bytes In Use: 90.02133747, Memory Free System Page Table Entries: 33563833, Memory Available MBytes: 14, Memory Modified Page List Bytes: 606208, Memory Cache Faults sec: 0.533328409, Memory Committed Bytes: 2281058304, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 10657.03493, Memory Pool Paged Resident Bytes: 12685312, Memory Write Copies sec: 0

[Assistant] normal


[User] PID: 3197, MINFLT: 0, MAJFLT: 0, VSTEXT: 193, VSIZE: 2.3, RSIZE: 97768, VGROW: 0, RGROW: 0, MEM: 0.03, CMD: firefox

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 47233, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.005315, src_bytes: 168, dst_bytes: 436, conn_state: SF, missed_bytes: 0, src_pkts: 4, src_ip_bytes: 280, dst_pkts: 2, dst_ip_bytes: 492, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 172.17.0.5, src_port: 46292, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.001778, src_bytes: 0, dst_bytes: 178, conn_state: SHR, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 2, dst_ip_bytes: 234, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 1683, MINFLT: 0, MAJFLT: 0, VSTEXT: 17, VSIZE: 37148, RSIZE: 456, VGROW: 0, RGROW: 8, MEM: 0, CMD: erneloops

[Assistant] normal


[User] PID: 6957, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <systemd-udev>, attack: 0

[Assistant] normal


[User] date: 25-Apr-19, time: 8:44:41, temperature: 28.33839844, pressure: -0.760532423, humidity: 55.8997084

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 57130, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: -, duration: 5.068932, src_bytes: 0, dst_bytes: 960, conn_state: SHR, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 104, dst_pkts: 3, dst_ip_bytes: 1116, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:42:22, FC1_Read_Input_Register: 16586, FC2_Read_Discrete_Value: 38670, FC3_Read_Holding_Register: 25501, FC4_Read_Coil: 21175

[Assistant] normal


[User] date: 28-Apr-19, time:  07:59:06 , temperature: 39.83951429, pressure: 1.147702648, humidity: 85.65648819

[Assistant] attack


[User] PID: 2119, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <worer/dyin>, attack: 1

[Assistant] attack


[User] Processor(_Total) DPC Rate: 11, Processor(_Total) pct_ Idle Time: 14.375, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.9375, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 43.54166667, Processor(_Total) pct_ C1 Time: 13.33333333, Processor(_Total) pct_ Processor Time: 85.625, Processor(_Total) C1 Transitions sec: 908.893817, Processor(_Total) pct_ DPC Time: 1.041666667, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 42.08333333, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 1531.621066, Processor(_Total) Interrupts sec: 2194.543619, Process(_Total) Pool Paged Bytes: 6072408, Process(_Total) IO Read Operations sec: 17.06467306, Process(_Total) Working Set - Private: 912650240, Process(_Total) Working Set Peak: 1939316736, Process(_Total) IO Write Operations sec: 0.266635517, Process(_Total) Page File Bytes: 1664999424, Process(_Total) pct_ User Time: 43.54166667, Process(_Total) Virtual Bytes Peak: 6323388416, Process(_Total) Page File Bytes Peak: 2031202304, Process(_Total) IO Other Bytes sec: 9550.484249, Process(_Total) Private Bytes: 1664999424, Process(_Total) IO Write Bytes sec: 21115.26651, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 5247528960, Process(_Total) pct_ Processor Time: 98.02083333, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1017304, Process(_Total) Working Set: 1001312256, Process(_Total) Page Faults sec: 3042.777856, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 328.9615685, Process(_Total) IO Data Operations sec: 17.33130857, Process(_Total) Thread Count: 549, Process(_Total) pct_ Privileged Time: 54.47916667, Process(_Total) IO Data Bytes sec: 31474.98955, Process(_Total) IO Read Bytes sec: 10359.72304, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13365, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 29227.58544, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 1058.809636, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 30286.39507, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 14.73161229, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 28.72997691, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 43.46158919, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 14.73161229, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 28.72997691, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 97665024, Memory Free & Zero Page List Bytes: 475136, Memory Cache Bytes Peak: 58441728, Memory System Code Resident Bytes: 1077248, Memory Available Bytes: 123428864, Memory Commit Limit: 2641346560, Memory Transition Pages RePurposed sec: 2564.96701, Memory Pages Output sec: 2101.08787, Memory Page Reads sec: 1213.79153, Memory Demand Zero Faults sec: 786.7747504, Memory Available KBytes: 120536, Memory Pages sec: 5948.505056, Memory Cache Bytes: 630784, Memory Pool Nonpaged Bytes: 59887616, Memory Page Faults sec: 3306.213746, Memory Transition Faults sec: 1308.580456, Memory System Cache Resident Bytes: 630784, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 407.0857749, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 89092096, Memory System Driver Resident Bytes: 1851392, Memory Standby Cache Normal Priority Bytes: 33861632, Memory Pool Paged Allocs: 61528, Memory Pool Nonpaged Allocs: 57367, Memory pct_ Committed Bytes In Use: 76.22321124, Memory Free System Page Table Entries: 33558954, Memory Available MBytes: 117, Memory Modified Page List Bytes: 274432, Memory Cache Faults sec: 5.599345847, Memory Committed Bytes: 2013319168, Memory System Driver Total Bytes: 5857280, Memory Pages Input sec: 3847.417186, Memory Pool Paged Resident Bytes: 18755584, Memory Write Copies sec: 2.399719649

[Assistant] attack


[User] date: 31-Mar-19, time: 12:38:18, latitude: 0.397758383, longitude: 10.70304417

[Assistant] normal


[User] PID: 3793, TRUN: 1, TSLPI: 11, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0.66, CMD: drone

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 51014, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.015741, src_bytes: 84, dst_bytes: 424, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 140, dst_pkts: 2, dst_ip_bytes: 480, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2882, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: 0, EXC: 0, State: S, CPU: 0, CMD: vmtoolsd

[Assistant] attack


[User] date: 2-Apr-19, time:    04:06:59   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 43060, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000063, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] Processor(_Total) DPC Rate: 46, Processor(_Total) pct_ Idle Time: 41.66666667, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 1.25, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 4.0625, Processor(_Total) pct_ C1 Time: 40, Processor(_Total) pct_ Processor Time: 58.33333333, Processor(_Total) C1 Transitions sec: 2439.737031, Processor(_Total) pct_ DPC Time: 0.416666667, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 54.16666667, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 3115.262074, Processor(_Total) Interrupts sec: 3941.252248, Process(_Total) Pool Paged Bytes: 10951616, Process(_Total) IO Read Operations sec: 65.59078605, Process(_Total) Working Set - Private: 946393088, Process(_Total) Working Set Peak: 3403182080, Process(_Total) IO Write Operations sec: 65.39061071, Process(_Total) Page File Bytes: 2772713472, Process(_Total) pct_ User Time: 3.958333333, Process(_Total) Virtual Bytes Peak: 13917667328, Process(_Total) Page File Bytes Peak: 3302760448, Process(_Total) IO Other Bytes sec: 4110.53386, Process(_Total) Private Bytes: 2772713472, Process(_Total) IO Write Bytes sec: 13544.46396, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 10010030080, Process(_Total) pct_ Processor Time: 98.125, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1365032, Process(_Total) Working Set: 1007714304, Process(_Total) Page Faults sec: 5590.029789, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 123.9085348, Process(_Total) IO Data Operations sec: 130.9813968, Process(_Total) Thread Count: 672, Process(_Total) pct_ Privileged Time: 94.16666667, Process(_Total) IO Data Bytes sec: 21260.95637, Process(_Total) IO Read Bytes sec: 7716.492415, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 15696, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 4540.510488, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 302.7985627, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 4843.30905, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 4.870933247, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 8.740989799, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 13.61192305, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 4.870933247, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 8.740989799, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 93470720, Memory Free & Zero Page List Bytes: 688128, Memory Cache Bytes Peak: 52883456, Memory System Code Resident Bytes: 712704, Memory Available Bytes: 125186048, Memory Commit Limit: 5204623360, Memory Transition Pages RePurposed sec: 5129.426335, Memory Pages Output sec: 6885.431133, Memory Page Reads sec: 2761.685701, Memory Demand Zero Faults sec: 97.61884028, Memory Available KBytes: 122252, Memory Pages sec: 14476.81396, Memory Cache Bytes: 311296, Memory Pool Nonpaged Bytes: 59527168, Memory Page Faults sec: 5763.381633, Memory Transition Faults sec: 2903.610016, Memory System Cache Resident Bytes: 311296, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 430.7106042, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 54394880, Memory System Driver Resident Bytes: 1044480, Memory Standby Cache Normal Priority Bytes: 70103040, Memory Pool Paged Allocs: 62256, Memory Pool Nonpaged Allocs: 61792, Memory pct_ Committed Bytes In Use: 64.14815922, Memory Free System Page Table Entries: 33558138, Memory Available MBytes: 119, Memory Modified Page List Bytes: 20480, Memory Cache Faults sec: 4.737483021, Memory Committed Bytes: 3338670080, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 7591.382828, Memory Pool Paged Resident Bytes: 11849728, Memory Write Copies sec: 0

[Assistant] attack


[User] PID: 1339, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: whoopsie

[Assistant] normal


[User] PID: 8117, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <vsftpd>, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49751, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.00002, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] Processor_DPC_Rate: 1, Processor_pct_ Idle_Time: 75.31859089, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 22.18672613, Processor_pct_ C1_Time: 75.31859089, Processor_pct_ Processor_Time: 23.83078178, Processor_C1_ransitions_sec: 126.4962216, Processor_pct_ DPC_Time: 0.15624455, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 1.640567777, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 28.19915769, Processor_Interrupts_sec: 386.6884496, Process_Pool_Paged Bytes: 24532880, Process_IO Read_Operations_sec: 0, Process_Working_Set_ Private: 1752518656, Process_Working_Set_Peak: 5500424192, Process_IO_Write Operations_sec: 1.999940262, Process_Page_File Bytes: 2990075904, Process_pct_ User_Time: 44.37345225, Process_Virtual_Bytes Peak: 1.57E+14, Process_Page_File Bytes Peak: 3997597696, Process_IO_Other_Bytes_sec: 5960.621956, Process_Private_Bytes: 2990075904, Process_IO_Write_Bytes_sec: 11534.65546, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.57E+14, Process_pct_ Processor_Time: 199.6805351, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2497344, Process_Working Set: 2356609024, Process_Page Faults_sec: 375.5887812, Process_ID Process: 0, Process_IO Other Operations_sec: 75.69773891, Process_IO Data Operations_sec: 1.999940262, Process_Thread Count: 1056, Process_pct_ Privileged_Time: 155.3070829, Process_IO Data Bytes_sec: 11534.65546, Process_IO Read Bytes_sec: 0, Process_Priority Base: 0, Process_Handle Count: 39738, Network_I(Intel R _82574L_GNC)TCP_APS: 6198, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4798.356673, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 277.3917143, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5075.748387, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 5.099847668, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 6.599802864, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 11.69965053, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 1, Network_I(Intel R _82574L_GNC) Packets Sent sec: 5.099847668, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 6.599802864, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 105852928, Memory Free & Zero Page List Bytes: 31932416, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 342601728, Memory Commit Limit: 4662874112, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 458.086317, Memory Available KBytes: 334572, Memory Pages sec: 0, Memory Cache Bytes: 4014080, Memory Pool Nonpaged Bytes: 86519808, Memory Page Faults sec: 376.3887573, Memory Transition Faults sec: 7.999761047, Memory System Cache Resident Bytes: 4014080, Memory Long-Term Average Standby Cache Lifetime (s): 626, Memory Standby Cache Reserve Bytes: 33718272, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 165126144, Memory System Driver Resident Bytes: 3121152, Memory Standby Cache Normal Priority Bytes: 111824896, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 84.27385173, Memory Free System Page Table Entries: 12208981, Memory Available MBytes: 326, Memory Modified Page List Bytes: 10944512, Memory Cache Faults sec: 0.699979092, Memory Committed Bytes: 3929583616, Memory System Driver Total Bytes: 18178048, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 51453952, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 13863.38462, LogicalDisk(_Total) pct_ Idle Time: 99.97631583, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 83.16549645, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 1.29996117, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.299991039, LogicalDisk(_Total) Free Megabytes: 170209, LogicalDisk(_Total) Avg  Disk sec Write: 0.000567838, LogicalDisk(_Total) Disk Bytes sec: 18021.86169, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.024606142, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000738164, LogicalDisk(_Total) Avg  Disk Queue Length: 0.000738164, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 18021.86169, LogicalDisk(_Total) Disk Transfers sec: 1.29996117, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 13863.38462, LogicalDisk(_Total) pct_ Disk Write Time: 0.024606142, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000567838

[Assistant] normal


[User] PID: 1547, RDDSK: 60, WRDSK: 0, WCANCL: 0, DSK: 0.06, CMD: named, attack: 1

[Assistant] attack


[User] date: 27-Apr-19, time:  05:28:42 , fridge_temperature: 1.3, temp_condition: low

[Assistant] attack


[User] date: 26-Apr-19, time:  16:15:32 , current_temperature: 27.85461295, thermostat_status: 1

[Assistant] attack


[User] PID: 4075, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 0

[Assistant] normal


[User] date: 1-Apr-19, time:  18:05:13 , latitude: 101.1862571, longitude: 112.2681049

[Assistant] normal


[User] PID: 2528, MINFLT: 0, MAJFLT: 0, VSTEXT: 31, VSIZE: 793.1, RSIZE: 16008, VGROW: 0, RGROW: 0, MEM: 0, CMD: unity-settings

[Assistant] attack


[User] date: 31-Mar-19, time: 12:39:15, motion_status: 0, light_status:  off

[Assistant] normal


[User] PID: 2809, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: vmtoolsd

[Assistant] normal


[User] PID: 1371, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: irqbalance

[Assistant] normal


[User] Processor(_Total) DPC Rate: 43, Processor(_Total) pct_ Idle Time: 73.02083333, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.208333333, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 1.770833333, Processor(_Total) pct_ C1 Time: 73.33333333, Processor(_Total) pct_ Processor Time: 26.97916667, Processor(_Total) C1 Transitions sec: 2946.735003, Processor(_Total) pct_ DPC Time: 0.625, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 25.20833333, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 2944.335002, Processor(_Total) Interrupts sec: 4347.802464, Process(_Total) Pool Paged Bytes: 7921264, Process(_Total) IO Read Operations sec: 4.80000272, Process(_Total) Working Set - Private: 791887872, Process(_Total) Working Set Peak: 2013384704, Process(_Total) IO Write Operations sec: 5.600003173, Process(_Total) Page File Bytes: 2016710656, Process(_Total) pct_ User Time: 1.770833333, Process(_Total) Virtual Bytes Peak: 8106889216, Process(_Total) Page File Bytes Peak: 2684235776, Process(_Total) IO Other Bytes sec: 9116.538499, Process(_Total) Private Bytes: 2016710656, Process(_Total) IO Write Bytes sec: 10103.00573, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6785216512, Process(_Total) pct_ Processor Time: 99.16666667, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1065456, Process(_Total) Working Set: 849408000, Process(_Total) Page Faults sec: 6007.803404, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 471.0002669, Process(_Total) IO Data Operations sec: 10.40000589, Process(_Total) Thread Count: 586, Process(_Total) pct_ Privileged Time: 97.39583333, Process(_Total) IO Data Bytes sec: 15287.542, Process(_Total) IO Read Bytes sec: 5184.536271, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13854, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 233.6001324, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 96.93338826, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 330.5335206, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 1.400000793, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 2.466668064, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 3.866668858, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 1.400000793, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 2.466668064, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 92753920, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 770048, Memory Available Bytes: 12734464, Memory Commit Limit: 2918703104, Memory Transition Pages RePurposed sec: 6374.603612, Memory Pages Output sec: 3954.535574, Memory Page Reads sec: 2687.734856, Memory Demand Zero Faults sec: 1451.134156, Memory Available KBytes: 12436, Memory Pages sec: 12018.94014, Memory Cache Bytes: 475136, Memory Pool Nonpaged Bytes: 52510720, Memory Page Faults sec: 6159.736824, Memory Transition Faults sec: 2056.534499, Memory System Cache Resident Bytes: 475136, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 489.4002773, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 245760, Memory System Driver Resident Bytes: 1241088, Memory Standby Cache Normal Priority Bytes: 12488704, Memory Pool Paged Allocs: 59217, Memory Pool Nonpaged Allocs: 52002, Memory pct_ Committed Bytes In Use: 81.01670844, Memory Free System Page Table Entries: 33562140, Memory Available MBytes: 12, Memory Modified Page List Bytes: 61440, Memory Cache Faults sec: 0.533333636, Memory Committed Bytes: 2364637184, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 8064.40457, Memory Pool Paged Resident Bytes: 11231232, Memory Write Copies sec: 0.133333409

[Assistant] normal


[User] PID: 1272, MINFLT: 132, MAJFLT: 224.2, VSTEXT: 9444, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: apache2

[Assistant] attack


[User] date: 31-Mar-19, time:    12:43:43   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] src_ip: 192.168.1.33, src_port: 46437, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 60, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1488, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: Xorg, attack: 0

[Assistant] normal


[User] PID: 3155, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: gnome-terminal

[Assistant] normal


[User] PID: 4515, TRUN: 0, TSLPI: 0, TSLPU: 0, POLI: 0, NICE: 0, PRI: 0, RTPR: 0, CPUNR: 0, Status: NE, EXC: 0, State: E, CPU: 0, CMD: <cron>

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:03, temperature: 31.79800695, pressure: 1.035, humidity: 5.458957712

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 50049, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.00012, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:17, current_temperature: 32.23805744, thermostat_status: 1

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 93, dst_ip: 176.28.50.165, dst_port: 93, proto: tcp, service: -, duration: 0.001375, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 80, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49524, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000103, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.37, src_port: 39659, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 1, dst_ip_bytes: 52, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time: 4:35:20, temperature: 35.95895596, pressure: 2.086898151, humidity: 14.43454295

[Assistant] attack


[User] src_ip: 192.168.1.180, src_port: 40552, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000877, src_bytes: 41, dst_bytes: 89, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 69, dst_pkts: 1, dst_ip_bytes: 117, dns_query: elasticsearch.mydns.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 1333, dst_ip: 192.168.1.152, dst_port: 1333, proto: tcp, service: -, duration: 0.225312, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 3790, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: ostinato

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 30, dst_ip: 192.168.1.190, dst_port: 30, proto: tcp, service: -, duration: 0.000222, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2843, RDDSK: 0, WRDSK: 24, WCANCL: 0, DSK: 0.67, CMD: atop, attack: 1

[Assistant] attack


[User] date: 26-Apr-19, time:  16:47:03 , current_temperature: 27.14972821, thermostat_status: 1

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 62946, dst_ip: 192.168.1.186, dst_port: 2010, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:39:37, latitude: 1.369494384, longitude: 11.59445104

[Assistant] normal


[User] PID: 6451, MINFLT: 2057, MAJFLT: 0, VSTEXT: 148, VSIZE: 17652, RSIZE: 2416, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] attack


[User] src_ip: 172.17.0.5, src_port: 42402, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000614, src_bytes: 0, dst_bytes: 178, conn_state: SHR, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 2, dst_ip_bytes: 234, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 28-Apr-19, time:  09:46:11 , current_temperature: 26.57153492, thermostat_status: 1

[Assistant] attack


[User] PID: 3739, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: worer/0:1, attack: 0

[Assistant] normal


[User] PID: 2533, MINFLT: 7, MAJFLT: 0, VSTEXT: 589, VSIZE: 641.3, RSIZE: 16428, VGROW: 0, RGROW: 0, MEM: 0, CMD: hud-service

[Assistant] normal


[User] date: 26-Apr-19, time:  19:29:54 , FC1_Read_Input_Register: 42803, FC2_Read_Discrete_Value: 6869, FC3_Read_Holding_Register: 2962, FC4_Read_Coil: 16353

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 37147, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.013682, src_bytes: 84, dst_bytes: 424, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 140, dst_pkts: 2, dst_ip_bytes: 480, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 25-Apr-19, time:  19:40:31 , latitude: 152.3197557, longitude: 169.7794705

[Assistant] attack


[User] PID: 3263, TRUN: 0, TSLPI: 27, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: WebExtensions

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49158, dst_ip: 192.168.1.33, dst_port: 7870, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 173, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 26-Apr-19, time:  16:10:31 , current_temperature: 31.63525917, thermostat_status: 1

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 45935, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000038, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 69.65520621, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.078124317, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 26.95288943, Processor_pct_ C1_Time: 69.65520621, Processor_pct_ Processor_Time: 29.21936862, Processor_C1_ransitions_sec: 395.1952814, Processor_pct_ DPC_Time: 0.078124317, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 2.265605199, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 33.59959882, Processor_Interrupts_sec: 918.9890273, Process_Pool_Paged Bytes: 22110808, Process_IO Read_Operations_sec: 2.199973732, Process_Working_Set_ Private: 1621696512, Process_Working_Set_Peak: 5955772416, Process_IO_Write Operations_sec: 1.699979702, Process_Page_File Bytes: 3347890176, Process_pct_ User_Time: 53.90577886, Process_Virtual_Bytes Peak: 1.52E+14, Process_Page_File Bytes Peak: 4398424064, Process_IO_Other_Bytes_sec: 2693.167844, Process_Private_Bytes: 3347890176, Process_IO_Write_Bytes_sec: 6759.319294, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.52E+14, Process_pct_ Processor_Time: 199.6857547, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2464248, Process_Working Set: 1760587776, Process_Page Faults_sec: 1143.486347, Process_ID Process: 0, Process_IO Other Operations_sec: 58.39930271, Process_IO Data Operations_sec: 3.899953435, Process_Thread Count: 995, Process_pct_ Privileged_Time: 145.7799759, Process_IO Data Bytes_sec: 7005.316357, Process_IO Read Bytes_sec: 245.9970628, Process_Priority Base: 0, Process_Handle Count: 38833, Network_I(Intel R _82574L_GNC)TCP_APS: 5235, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4989.14043, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 280.7966473, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5269.937077, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 5.199937913, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 8.599897317, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 13.79983523, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 2, Network_I(Intel R _82574L_GNC) Packets Sent sec: 5.199937913, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 8.599897317, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 103362560, Memory Free & Zero Page List Bytes: 2084864, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 668696576, Memory Commit Limit: 8473145344, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 86.19897078, Memory Page Reads sec: 0.599992836, Memory Demand Zero Faults sec: 899.1892637, Memory Available KBytes: 653024, Memory Pages sec: 94.29887407, Memory Cache Bytes: 1163264, Memory Pool Nonpaged Bytes: 97107968, Memory Page Faults sec: 1144.88633, Memory Transition Faults sec: 391.9953196, Memory System Cache Resident Bytes: 1163264, Memory Long-Term Average Standby Cache Lifetime (s): 871, Memory Standby Cache Reserve Bytes: 304758784, Memory Page Writes sec: 3.099962986, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 199512064, Memory System Driver Resident Bytes: 1.76E+13, Memory Standby Cache Normal Priority Bytes: 162340864, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 49.38034137, Memory Free System Page Table Entries: 12210254, Memory Available MBytes: 637, Memory Modified Page List Bytes: 14565376, Memory Cache Faults sec: 0, Memory Committed Bytes: 4184068096, Memory System Driver Total Bytes: 18202624, Memory Pages Input sec: 8.099903287, Memory Pool Paged Resident Bytes: 32047104, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 98193.2973, LogicalDisk(_Total) pct_ Idle Time: 99.93007361, LogicalDisk(_Total) Disk Reads sec: 0.599992836, LogicalDisk(_Total) pct_ Free Space: 81.30047932, LogicalDisk(_Total) Disk Read Bytes sec: 33177.20386, LogicalDisk(_Total) Avg  Disk sec Read: 0.0009714, LogicalDisk(_Total) Disk Writes sec: 3.699955823, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 166392, LogicalDisk(_Total) Avg  Disk sec Write: 0.000562995, LogicalDisk(_Total) Disk Bytes sec: 396488.0659, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.000582835, LogicalDisk(_Total) pct_ Disk Time: 0.088863223, LogicalDisk(_Total) Avg  Disk Bytes Read: 55296, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.002083062, LogicalDisk(_Total) Avg  Disk Queue Length: 0.002665897, LogicalDisk(_Total) pct_ Disk Read Time: 0.01942783, LogicalDisk(_Total) Disk Write Bytes sec: 363310.8621, LogicalDisk(_Total) Disk Transfers sec: 4.299948659, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 92207.62791, LogicalDisk(_Total) pct_ Disk Write Time: 0.069435393, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000619981

[Assistant] normal


[User] date: 1-Apr-19, time:  17:43:42 , latitude: 88.76130457, longitude: 100.9973437

[Assistant] normal


[User] PID: 2615, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: update-notifie, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 45462, dst_ip: 101.119.11.17, dst_port: 80, proto: tcp, service: http, duration: 21.588445, src_bytes: 288, dst_bytes: 384, conn_state: SF, missed_bytes: 0, src_pkts: 8, src_ip_bytes: 712, dst_pkts: 5, dst_ip_bytes: 652, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 52816, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  03:58:19 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] PID: 3057, MINFLT: 0, MAJFLT: 0, VSTEXT: 49, VSIZE: 627.8, RSIZE: 16432, VGROW: 0, RGROW: 0, MEM: 0, CMD: update-notifie

[Assistant] attack


[User] date: 2-Apr-19, time:  04:06:49 , current_temperature: 28.28837815, thermostat_status: 1

[Assistant] normal


[User] src_ip: 192.168.1.190, src_port: 13781, dst_ip: 208.84.0.53, dst_port: 53, proto: udp, service: dns, duration: 7.18168, src_bytes: 39, dst_bytes: 72, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 67, dst_pkts: 1, dst_ip_bytes: 100, dns_query: config.edge.skype.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: T, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.190, src_port: 1194, dst_ip: 192.168.1.190, dst_port: 1194, proto: tcp, service: -, duration: 0.231144, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:53, temperature: 47.7859043, pressure: 0.421061034, humidity: 91.57488837

[Assistant] normal


[User] PID: 3681, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] PID: 6266, MINFLT: 922, MAJFLT: 0, VSTEXT: 0, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: <vsftpd>

[Assistant] attack


[User] date: 1-Apr-19, time:  20:06:44 , motion_status: 1, light_status:  on

[Assistant] normal


[User] date: 1-Apr-19, time:  20:11:27 , current_temperature: 29.22909517, thermostat_status: 1

[Assistant] normal


[User] date: 27-Apr-19, time:  05:39:48 , latitude: 23.0130005, longitude: 32.48374317

[Assistant] attack


[User] PID: 2731, MINFLT: 0, MAJFLT: 0, VSTEXT: 35, VSIZE: 280.1, RSIZE: 5144, VGROW: 0, RGROW: 0, MEM: 0, CMD: indicator-appl

[Assistant] attack


[User] PID: 4372, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] PID: 2966, MINFLT: 0, MAJFLT: 0, VSTEXT: 27, VSIZE: 444.4, RSIZE: 3016, VGROW: 0, RGROW: 384, MEM: 0, CMD: telepathy-indi

[Assistant] normal


[User] PID: 6567, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vsftpd, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.190, src_port: 1651, dst_ip: 192.168.1.190, dst_port: 1651, proto: tcp, service: -, duration: 0.272401, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 1854, MINFLT: 8, MAJFLT: 0, VSTEXT: 36, VSIZE: 159.8, RSIZE: 4404, VGROW: 0, RGROW: 0, MEM: 0, CMD: vmtoolsd

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 34296, dst_ip: 192.168.1.152, dst_port: 10502, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 59774, dst_ip: 216.58.199.34, dst_port: 443, proto: tcp, service: ssl, duration: 0.238559, src_bytes: 506, dst_bytes: 2924, conn_state: SF, missed_bytes: 0, src_pkts: 12, src_ip_bytes: 1150, dst_pkts: 10, dst_ip_bytes: 3490, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 53542, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.002305, src_bytes: 155, dst_bytes: 651, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 423, dst_pkts: 5, dst_ip_bytes: 919, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49926, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.000116, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 26-Apr-19, time:  15:49:27 , motion_status: 1, light_status:  on

[Assistant] attack


[User] PID: 1279, TRUN: 0, TSLPI: 27, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 4, Status: -, EXC: 0, State: S, CPU: 0, CMD: mysqld

[Assistant] attack


[User] date: 25-Apr-19, time:  15:17:04 , latitude: 11.83409859, longitude: 21.49357341

[Assistant] attack


[User] date: 25-Apr-19, time: 8:44:37, latitude: 63.68945874, longitude: 70.02105608

[Assistant] attack


[User] PID: 4390, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: 0, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:08, FC1_Read_Input_Register: 12353, FC2_Read_Discrete_Value: 4823, FC3_Read_Holding_Register: 25140, FC4_Read_Coil: 59230

[Assistant] normal


[User] date: 31-Mar-19, time:    12:41:07   , fridge_temperature: 2, temp_condition: low

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:38, temperature: 29.44617772, pressure: 1.568339335, humidity: 64.517853

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:27, temperature: 45.53721505, pressure: 1.565075059, humidity: 32.24625213

[Assistant] normal


[User] PID: 2983, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 5, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] attack


[User] date: 25-Apr-19, time: 16:18:29, temperature: 34.79619581, pressure: 2.48501116, humidity: 36.58102962

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 42908, dst_ip: 192.168.1.152, dst_port: 4, proto: tcp, service: -, duration: 0.006347, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.33, src_port: 43685, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 80.68385189, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 17.29245164, Processor_pct_ C1_Time: 80.68385189, Processor_pct_ Processor_Time: 18.46726419, Processor_C1_ransitions_sec: 137.8143551, Processor_pct_ DPC_Time: 0.078246388, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 1.173695813, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 24.03738751, Processor_Interrupts_sec: 559.2698828, Process_Pool_Paged Bytes: 19898584, Process_IO Read_Operations_sec: 0, Process_Working_Set_ Private: 1342611456, Process_Working_Set_Peak: 4995006464, Process_IO_Write Operations_sec: 1.001557813, Process_Page_File Bytes: 2253651968, Process_pct_ User_Time: 34.58490329, Process_Virtual_Bytes Peak: 1.44E+14, Process_Page_File Bytes Peak: 3295100928, Process_IO_Other_Bytes_sec: 4127.620059, Process_Private_Bytes: 2253651968, Process_IO_Write_Bytes_sec: 10265.56696, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.44E+14, Process_pct_ Processor_Time: 199.8412738, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2002344, Process_Working Set: 1862737920, Process_Page Faults_sec: 610.1490197, Process_ID Process: 0, Process_IO Other Operations_sec: 78.52213254, Process_IO Data Operations_sec: 1.001557813, Process_Thread Count: 886, Process_pct_ Privileged_Time: 165.2563705, Process_IO Data Bytes_sec: 10265.56696, Process_IO Read Bytes_sec: 0, Process_Priority Base: 0, Process_Handle Count: 35626, Network_I(Intel R _82574L_GNC)TCP_APS: 4944, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4884.397142, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 236.768267, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5121.165409, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 4.406854377, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 7.411527816, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 11.81838219, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 2, Network_I(Intel R _82574L_GNC) Packets Sent sec: 4.406854377, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 7.411527816, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 106516480, Memory Free & Zero Page List Bytes: 31207424, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 774930432, Memory Commit Limit: 8460087296, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 752.9711638, Memory Available KBytes: 756768, Memory Pages sec: 0, Memory Cache Bytes: 13238272, Memory Pool Nonpaged Bytes: 90640384, Memory Page Faults sec: 610.5496428, Memory Transition Faults sec: 11.71822641, Memory System Cache Resident Bytes: 13238272, Memory Long-Term Average Standby Cache Lifetime (s): 17, Memory Standby Cache Reserve Bytes: 426356736, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 163000320, Memory System Driver Resident Bytes: 4308992, Memory Standby Cache Normal Priority Bytes: 154365952, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 37.04672731, Memory Free System Page Table Entries: 12212106, Memory Available MBytes: 739, Memory Modified Page List Bytes: 17096704, Memory Cache Faults sec: 0.400623125, Memory Committed Bytes: 3134185472, Memory System Driver Total Bytes: 18223104, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 71131136, Memory Write Copies sec: 2.30358297, LogicalDisk(_Total) Avg  Disk Bytes Write: 15974.4, LogicalDisk(_Total) pct_ Idle Time: 99.9783434, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 81.27849196, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 1.001557813, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 166347, LogicalDisk(_Total) Avg  Disk sec Write: 0.00063762, LogicalDisk(_Total) Disk Bytes sec: 15999.28513, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.021287024, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000638611, LogicalDisk(_Total) Avg  Disk Queue Length: 0.000638611, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 15999.28513, LogicalDisk(_Total) Disk Transfers sec: 1.001557813, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 15974.4, LogicalDisk(_Total) pct_ Disk Write Time: 0.021287024, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.00063762

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:24, latitude: 0.11421849, longitude: 10.05815151

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49973, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000144, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:11, temperature: 45.08372364, pressure: 0.248113632, humidity: 44.35961289

[Assistant] normal


[User] date: 31-Mar-19, time: 12:42:10, FC1_Read_Input_Register: 44217, FC2_Read_Discrete_Value: 22917, FC3_Read_Holding_Register: 43552, FC4_Read_Coil: 53731

[Assistant] normal


[User] PID: 1378, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: config

[Assistant] normal


[User] PID: 3675, MINFLT: 2072, MAJFLT: 0, VSTEXT: 148, VSIZE: 17948, RSIZE: 2604, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.33, src_port: 39941, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 184, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.184, src_port: 8080, dst_ip: 192.168.1.184, dst_port: 1531, proto: tcp, service: -, duration: 0.185657, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 46329, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.00973, src_bytes: 37, dst_bytes: 53, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 65, dst_pkts: 1, dst_ip_bytes: 81, dns_query: testphp.vulnweb.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: fe80::f554:8774:9968:b60b, src_port: 5353, dst_ip: ff02::fb, dst_port: 5353, proto: udp, service: dns, duration: 0.004116, src_bytes: 172, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 268, dst_pkts: 0, dst_ip_bytes: 0, dns_query: desktop-uciie91.local, dns_qclass: 1, dns_qtype: 255, dns_rcode: 0, dns_AA: T, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 2199, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: gnome-shell, attack: 1

[Assistant] attack


[User] date: 28-Apr-19, time:  04:27:02 , latitude: 1.654544896, longitude: 11.44760033

[Assistant] attack


[User] PID: 4949, TRUN: 0, TSLPI: 0, TSLPU: 0, POLI: 0, NICE: 0, PRI: 0, RTPR: 0, CPUNR: 0, Status: NE, EXC: 0, State: E, CPU: 0, CMD: <dpkg>

[Assistant] attack


[User] PID: 1516, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: Xorg, attack: 1

[Assistant] attack


[User] date: 1-Apr-19, time:  20:11:53 , motion_status: 0, light_status:  off

[Assistant] normal


[User] PID: 3678, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 46, dst_ip: 192.168.1.194, dst_port: 46, proto: tcp, service: -, duration: 0.000001, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3103, MINFLT: 0, MAJFLT: 0, VSTEXT: 2132, VSIZE: 2.5, RSIZE: 28220, VGROW: 0, RGROW: 0, MEM: 0.01, CMD: ostinato

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 55014, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.012381, src_bytes: 84, dst_bytes: 424, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 140, dst_pkts: 2, dst_ip_bytes: 480, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3895, RDDSK: 0, WRDSK: 20, WCANCL: 0, DSK: 0.12, CMD: atop, attack: 0

[Assistant] normal


[User] PID: 3311, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: deja-dup-monit

[Assistant] normal


[User] PID: 3311, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: deja-dup-monit

[Assistant] normal


[User] PID: 2244, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: ssh-agent

[Assistant] attack


[User] date: 28-Apr-19, time:  17:19:41 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] date: 25-Apr-19, time: 9:40:40, latitude: 108.1178637, longitude: 115.7372283

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 50947, dst_ip: 192.168.1.250, dst_port: 9929, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3894, RDDSK: 0, WRDSK: 12, WCANCL: 0, DSK: 0.09, CMD: atop, attack: 0

[Assistant] normal


[User] PID: 2119, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] PID: 2801, TRUN: 0, TSLPI: 8, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: tracker-store

[Assistant] normal


[User] date: 25-Apr-19, time: 16:07:17, temperature: 37.42954712, pressure: -2.775802464, humidity: 98.09080819

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 74, dst_ip: 192.168.1.190, dst_port: 74, proto: tcp, service: -, duration: 0.000003, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:  04:04:03 , current_temperature: 26.69154073, thermostat_status: 1

[Assistant] normal


[User] PID: 10668, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vsftpd, attack: 0

[Assistant] normal


[User] PID: 2498, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: upstart-dbus-b

[Assistant] normal


[User] PID: 4375, MINFLT: 2072, MAJFLT: 0, VSTEXT: 148, VSIZE: 17644, RSIZE: 2432, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] PID: 3303, RDDSK: 0, WRDSK: 4, WCANCL: 0, DSK: 0.03, CMD: atop, attack: 1

[Assistant] attack


[User] PID: 2244, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 5, Status: -, EXC: 0, State: S, CPU: 0, CMD: ssh-agent

[Assistant] attack


[User] src_ip: 192.168.1.195, src_port: 51695, dst_ip: 192.168.1.1, dst_port: 41952, proto: tcp, service: -, duration: 3.009617, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 104, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:40:39, temperature: 34.35034154, pressure: 1.507579796, humidity: 49.14953837

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 80, dst_ip: 192.168.1.193, dst_port: 1562, proto: tcp, service: -, duration: 0.254602, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.33, src_port: 45663, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 1500, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3752, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: tcpdump

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49709, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.000814, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 4374, MINFLT: 2072, MAJFLT: 0, VSTEXT: 148, VSIZE: 17640, RSIZE: 2424, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] date: 31-Mar-19, time:    12:41:38   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] PID: 3678, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: atop

[Assistant] normal


[User] PID: 3504, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: 0, EXC: 0, State: S, CPU: 0, CMD: kworker/1:0

[Assistant] attack


[User] date: 28-Apr-19, time:  07:07:48 , FC1_Read_Input_Register: 33026, FC2_Read_Discrete_Value: 10960, FC3_Read_Holding_Register: 20014, FC4_Read_Coil: 52694

[Assistant] attack


[User] date: 2-Apr-19, time:    04:05:03   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] date: 1-Apr-19, time:  18:56:03 , current_temperature: 31.82228315, thermostat_status: 1

[Assistant] normal


[User] date: 31-Mar-19, time:    12:42:08   , door_state: open, sphone_signal: true

[Assistant] normal


[User] PID: 4450, MINFLT: 0, MAJFLT: 0, VSTEXT: 596, VSIZE: 184.3, RSIZE: 6168, VGROW: 0, RGROW: 0, MEM: 0, CMD: apache2

[Assistant] attack


[User] date: 28-Apr-19, time:  17:21:22 , current_temperature: 25, thermostat_status: 0

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49358, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.000213, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 14892, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: unity-panel-se, attack: 1

[Assistant] attack


[User] PID: 2498, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: upstart-dbus-b

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49550, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000115, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  20:49:20 , fridge_temperature: 5.85, temp_condition: low

[Assistant] attack


[User] PID: 4032, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: kworker/u256:0

[Assistant] normal


[User] date: 28-Apr-19, time:  05:06:20 , motion_status: 1, light_status:  on

[Assistant] attack


[User] Processor(_Total) DPC Rate: 30, Processor(_Total) pct_ Idle Time: 82.29166667, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 15.9375, Processor(_Total) pct_ C1 Time: 80, Processor(_Total) pct_ Processor Time: 17.70833333, Processor(_Total) C1 Transitions sec: 90.53406907, Processor(_Total) pct_ DPC Time: 0.208333333, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 1.770833333, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 43.60035433, Processor(_Total) Interrupts sec: 125.8676896, Process(_Total) Pool Paged Bytes: 8697328, Process(_Total) IO Read Operations sec: 10.13341568, Process(_Total) Working Set - Private: 895700992, Process(_Total) Working Set Peak: 2911977472, Process(_Total) IO Write Operations sec: 9.933414059, Process(_Total) Page File Bytes: 2305581056, Process(_Total) pct_ User Time: 15.9375, Process(_Total) Virtual Bytes Peak: 9043578880, Process(_Total) Page File Bytes Peak: 2617761792, Process(_Total) IO Other Bytes sec: 6761.921619, Process(_Total) Private Bytes: 2305581056, Process(_Total) IO Write Bytes sec: 2741.088943, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 7789891584, Process(_Total) pct_ Processor Time: 99.79166667, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1156088, Process(_Total) Working Set: 959541248, Process(_Total) Page Faults sec: 386.4031402, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 294.8023958, Process(_Total) IO Data Operations sec: 20.06682974, Process(_Total) Thread Count: 597, Process(_Total) pct_ Privileged Time: 83.85416667, Process(_Total) IO Data Bytes sec: 5489.244609, Process(_Total) IO Read Bytes sec: 2748.155667, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 14594, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 2682.288465, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 136.0011052, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 2818.28957, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 2.533353921, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 6.266717594, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 8.800071515, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 2.533353921, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 6.266717594, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 96546816, Memory Free & Zero Page List Bytes: 122880, Memory Cache Bytes Peak: 25575424, Memory System Code Resident Bytes: 1273856, Memory Available Bytes: 172339200, Memory Commit Limit: 3476848640, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 34.93361723, Memory Demand Zero Faults sec: 348.1361625, Memory Available KBytes: 168300, Memory Pages sec: 139.8011361, Memory Cache Bytes: 389120, Memory Pool Nonpaged Bytes: 59052032, Memory Page Faults sec: 393.6031987, Memory Transition Faults sec: 11.26675823, Memory System Cache Resident Bytes: 389120, Memory Standby Cache Reserve Bytes: 24576, Memory Page Writes sec: 0, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 68194304, Memory System Driver Resident Bytes: 1392640, Memory Standby Cache Normal Priority Bytes: 103997440, Memory Pool Paged Allocs: 61510, Memory Pool Nonpaged Allocs: 59552, Memory pct_ Committed Bytes In Use: 80.62791574, Memory Free System Page Table Entries: 33557323, Memory Available MBytes: 164, Memory Modified Page List Bytes: 61440, Memory Cache Faults sec: 0.400003251, Memory Committed Bytes: 2803310592, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 139.8011361, Memory Pool Paged Resident Bytes: 17707008, Memory Write Copies sec: 0

[Assistant] attack


[User] PID: 1007, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: upstart-file-b

[Assistant] attack


[User] src_ip: 192.168.1.6, src_port: 5353, dst_ip: 224.0.0.251, dst_port: 5353, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 89, dst_pkts: 0, dst_ip_bytes: 0, dns_query: _googlecast._tcp.local, dns_qclass: 1, dns_qtype: 12, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:54, FC1_Read_Input_Register: 51729, FC2_Read_Discrete_Value: 15091, FC3_Read_Holding_Register: 54723, FC4_Read_Coil: 32457

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 49976, dst_ip: 176.28.50.165, dst_port: 21, proto: tcp, service: ftp, duration: 3.478547, src_bytes: 86, dst_bytes: 215, conn_state: SF, missed_bytes: 0, src_pkts: 18, src_ip_bytes: 1030, dst_pkts: 12, dst_ip_bytes: 823, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 4032, MINFLT: 0, MAJFLT: 0, VSTEXT: 0, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: worer/u256:0

[Assistant] normal


[User] date: 28-Apr-19, time:  05:13:50 , current_temperature: 29.81927244, thermostat_status: 1

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 62946, dst_ip: 192.168.1.186, dst_port: 4662, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  23:09:25 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] PID: 2325, MINFLT: 0, MAJFLT: 0, VSTEXT: 869, VSIZE: 362.1, RSIZE: 1700, VGROW: 0, RGROW: 8, MEM: 0, CMD: gnome-eyring-

[Assistant] normal