[User] date: 31-Mar-19, time: 12:37:11, latitude: 0.047204236, longitude: 10.04346586

[Assistant] normal


[User] date: 2-Apr-19, time:    04:04:57   , door_state: open, sphone_signal: true

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:13, FC1_Read_Input_Register: 46329, FC2_Read_Discrete_Value: 28719, FC3_Read_Holding_Register: 3864, FC4_Read_Coil: 61991

[Assistant] normal


[User] date: 28-Apr-19, time:  11:45:51 , FC1_Read_Input_Register: 29731, FC2_Read_Discrete_Value: 15675, FC3_Read_Holding_Register: 30853, FC4_Read_Coil: 52214

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 57022, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3103, MINFLT: 0, MAJFLT: 0, VSTEXT: 2132, VSIZE: 2.5, RSIZE: 28116, VGROW: 0, RGROW: 0, MEM: 0.01, CMD: ostinato

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 56106, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: -, duration: 0.001968, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 25-Apr-19, time:  08:41:18 , fridge_temperature: 7.95, temp_condition: high

[Assistant] attack


[User] PID: 4375, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 35485, dst_ip: 192.168.1.49, dst_port: 8002, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:59, temperature: 41.19732125, pressure: 1.408244584, humidity: 43.16358837

[Assistant] normal


[User] date: 27-Apr-19, time:  05:08:14 , fridge_temperature: 3.2, temp_condition: low

[Assistant] attack


[User] PID: 2618, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: unity-panel-se, attack: 0

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:30, temperature: 20.8929987, pressure: 1.120553602, humidity: 40.49596633

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 39155, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.065076, src_bytes: 64, dst_bytes: 327, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 120, dst_pkts: 2, dst_ip_bytes: 383, dns_query: duckduckgo.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time:    12:43:55   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] PID: 1878, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vmtoolsd, attack: 0

[Assistant] normal


[User] Processor(_Total) DPC Rate: 69, Processor(_Total) pct_ Idle Time: 65.3125, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.104166667, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 2.083333333, Processor(_Total) pct_ C1 Time: 66.66666667, Processor(_Total) pct_ Processor Time: 34.6875, Processor(_Total) C1 Transitions sec: 3645.57324, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 32.60416667, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 3757.574466, Processor(_Total) Interrupts sec: 5130.922833, Process(_Total) Pool Paged Bytes: 7705976, Process(_Total) IO Read Operations sec: 2.133356686, Process(_Total) Working Set - Private: 773664768, Process(_Total) Working Set Peak: 2041602048, Process(_Total) IO Write Operations sec: 1.666684911, Process(_Total) Page File Bytes: 2104197120, Process(_Total) pct_ User Time: 2.083333333, Process(_Total) Virtual Bytes Peak: 7994359808, Process(_Total) Page File Bytes Peak: 2737045504, Process(_Total) IO Other Bytes sec: 5158.589803, Process(_Total) Private Bytes: 2104197120, Process(_Total) IO Write Bytes sec: 5178.12335, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6706155520, Process(_Total) pct_ Processor Time: 99.89583333, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1036344, Process(_Total) Working Set: 824483840, Process(_Total) Page Faults sec: 5548.794074, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 265.6695749, Process(_Total) IO Data Operations sec: 3.800041598, Process(_Total) Thread Count: 544, Process(_Total) pct_ Privileged Time: 97.8125, Process(_Total) IO Data Bytes sec: 5417.592638, Process(_Total) IO Read Bytes sec: 239.4692881, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13645, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 121.7346659, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 81.13422148, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 202.8688874, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 1.200013136, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 1.266680533, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 2.466693669, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 1.200013136, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 1.266680533, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 92610560, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 712704, Memory Available Bytes: 16007168, Memory Commit Limit: 2918703104, Memory Transition Pages RePurposed sec: 5738.262815, Memory Pages Output sec: 5392.392362, Memory Page Reads sec: 3004.299554, Memory Demand Zero Faults sec: 1563.01711, Memory Available KBytes: 15632, Memory Pages sec: 12147.79964, Memory Cache Bytes: 372736, Memory Pool Nonpaged Bytes: 77189120, Memory Page Faults sec: 5744.929554, Memory Transition Faults sec: 1178.612902, Memory System Cache Resident Bytes: 372736, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 935.5435744, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 323584, Memory System Driver Resident Bytes: 1306624, Memory Standby Cache Normal Priority Bytes: 15683584, Memory Pool Paged Allocs: 59021, Memory Pool Nonpaged Allocs: 57200, Memory pct_ Committed Bytes In Use: 84.67906491, Memory Free System Page Table Entries: 33562140, Memory Available MBytes: 15, Memory Modified Page List Bytes: 36864, Memory Cache Faults sec: 0.600006568, Memory Committed Bytes: 2471530496, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 6755.407283, Memory Pool Paged Resident Bytes: 10465280, Memory Write Copies sec: 0

[Assistant] normal


[User] date: 28-Apr-19, time:  10:12:47 , current_temperature: 31.41077835, thermostat_status: 1

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:06, current_temperature: 25.93919304, thermostat_status: 1

[Assistant] normal


[User] date: 31-Mar-19, time: 12:42:32, temperature: 24.73489782, pressure: 2.473492628, humidity: 89.28206622

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:56, latitude: 0.099901213, longitude: 10.17451758

[Assistant] normal


[User] PID: 3257, MINFLT: 13922, MAJFLT: 0, VSTEXT: 193, VSIZE: 1.7, RSIZE: 187.4, VGROW: 0, RGROW: 12.6, MEM: 0.05, CMD: Web-Content

[Assistant] normal


[User] date: 1-Apr-19, time:  18:56:02 , current_temperature: 27.20902093, thermostat_status: 1

[Assistant] normal


[User] Processor_DPC_Rate: 4, Processor_pct_ Idle_Time: 55.07172967, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 30.54683987, Processor_pct_ C1_Time: 55.07172967, Processor_pct_ Processor_Time: 37.03132241, Processor_C1_ransitions_sec: 416.3753183, Processor_pct_ DPC_Time: 0.546874371, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 6.484367543, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 368.9781279, Processor_Interrupts_sec: 1658.601682, Process_Pool_Paged Bytes: 14234072, Process_IO Read_Operations_sec: 0.699958508, Process_Working_Set_ Private: 429359104, Process_Working_Set_Peak: 4160753664, Process_IO_Write Operations_sec: 38.79770017, Process_Page_File Bytes: 1241288704, Process_pct_ User_Time: 61.09367974, Process_Virtual_Bytes Peak: 1.10E+14, Process_Page_File Bytes Peak: 3573981184, Process_IO_Other_Bytes_sec: 79734.67353, Process_Private_Bytes: 1241288704, Process_IO_Write_Bytes_sec: 25524022, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.10E+14, Process_pct_ Processor_Time: 198.9060213, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 1608224, Process_Working Set: 1113919488, Process_Page Faults_sec: 7725.442055, Process_ID Process: 0, Process_IO Other Operations_sec: 2475.453261, Process_IO Data Operations_sec: 39.49765868, Process_Thread Count: 790, Process_pct_ Privileged_Time: 137.8123415, Process_IO Data Bytes_sec: 35558305.79, Process_IO Read Bytes_sec: 10034283.79, Process_Priority Base: 0, Process_Handle Count: 30540, Network_I(Intel R _82574L_GNC)TCP_APS: 0, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 115.693142, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 0, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 115.693142, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 0, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 1.199928871, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 1.199928871, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 0, Network_I(Intel R _82574L_GNC) Packets Sent sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 1.199928871, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 216498176, Memory Free & Zero Page List Bytes: 6819840, Memory Cache Bytes Peak: 815652864, Memory System Code Resident Bytes: 2281472, Memory Available Bytes: 710217728, Memory Commit Limit: 3354243072, Memory Transition Pages RePurposed sec: 7180.274371, Memory Pages Output sec: 182.7891647, Memory Page Reads sec: 40.99756977, Memory Demand Zero Faults sec: 8014.924895, Memory Available KBytes: 693572, Memory Pages sec: 2700.439925, Memory Cache Bytes: 43089920, Memory Pool Nonpaged Bytes: 71987200, Memory Page Faults sec: 15736.66717, Memory Transition Faults sec: 5078.898936, Memory System Cache Resident Bytes: 0, Memory Long-Term Average Standby Cache Lifetime (s): 205, Memory Standby Cache Reserve Bytes: 465575936, Memory Page Writes sec: 20.09880859, Memory System Code Total Bytes: 3825664, Memory Standby Cache Core Bytes: 123904000, Memory System Driver Resident Bytes: 5840896, Memory Standby Cache Normal Priority Bytes: 113917952, Memory Pool Paged Allocs: 207339, Memory Pool Nonpaged Allocs: 129385, Memory pct_ Committed Bytes In Use: 55.30579173, Memory Free System Page Table Entries: 12236258, Memory Available MBytes: 677, Memory Modified Page List Bytes: 3104768, Memory Cache Faults sec: 2636.7437, Memory Committed Bytes: 1855090688, Memory System Driver Total Bytes: 17104896, Memory Pages Input sec: 2517.65076, Memory Pool Paged Resident Bytes: 155348992, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 193676.675, LogicalDisk(_Total) pct_ Idle Time: 31.99358121, LogicalDisk(_Total) Disk Reads sec: 36.99780686, LogicalDisk(_Total) pct_ Free Space: 89.48789303, LogicalDisk(_Total) Disk Read Bytes sec: 10225723.44, LogicalDisk(_Total) Avg  Disk sec Read: 0.0096119, LogicalDisk(_Total) Disk Writes sec: 143.3915001, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 11.69930649, LogicalDisk(_Total) Free Megabytes: 182975, LogicalDisk(_Total) Avg  Disk sec Write: 0.006135588, LogicalDisk(_Total) Disk Bytes sec: 37997312.41, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.355639871, LogicalDisk(_Total) pct_ Disk Time: 123.5482159, LogicalDisk(_Total) Avg  Disk Bytes Read: 276387.2865, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.879842288, LogicalDisk(_Total) Avg  Disk Queue Length: 1.235482159, LogicalDisk(_Total) pct_ Disk Read Time: 35.5639871, LogicalDisk(_Total) Disk Write Bytes sec: 27771588.97, LogicalDisk(_Total) Disk Transfers sec: 180.389307, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 210640.6031, LogicalDisk(_Total) pct_ Disk Write Time: 87.98422882, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.006848579

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 35816, dst_ip: 192.168.1.184, dst_port: 443, proto: tcp, service: -, duration: 60.736011, src_bytes: 0, dst_bytes: 1, conn_state: S1, missed_bytes: 1, src_pkts: 3, src_ip_bytes: 164, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1272, MINFLT: 132, MAJFLT: 224.2, VSTEXT: 9444, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: apache2

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49710, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000098, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2707, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: indicator-keyb

[Assistant] normal


[User] src_ip: 192.168.1.195, src_port: 55751, dst_ip: 8.8.8.8, dst_port: 53, proto: udp, service: dns, duration: 0.493443, src_bytes: 47, dst_bytes: 158, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 75, dst_pkts: 1, dst_ip_bytes: 186, dns_query: v10.events.data.microsoft.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 2938, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: nautilus, attack: 0

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:15, latitude: 0.992894531, longitude: 11.59039438

[Assistant] normal


[User] date: 28-Apr-19, time: 13:40:47, motion_status: 1, light_status:  on

[Assistant] attack


[User] date: 28-Apr-19, time:  08:47:35 , temperature: 31.6967177, pressure: -1.059365535, humidity: 95.37388756

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49490, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000129, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 14256, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <pop3-login>, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 34470, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000014, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 52244, dst_ip: 52.59.177.21, dst_port: 80, proto: tcp, service: -, duration: 1.383953, src_bytes: 254, dst_bytes: 12183, conn_state: SF, missed_bytes: 254, src_pkts: 4, src_ip_bytes: 216, dst_pkts: 12, dst_ip_bytes: 12815, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2849, MINFLT: 8, MAJFLT: 0, VSTEXT: 1350, VSIZE: 1.4, RSIZE: 48316, VGROW: 0, RGROW: 0, MEM: 0.01, CMD: nautilus

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 58026, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000019, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 1-Apr-19, time:  20:12:49 , motion_status: 1, light_status:  on

[Assistant] normal


[User] date: 26-Apr-19, time: 13:41:15, door_state: closed, sphone_signal: 0

[Assistant] attack


[User] PID: 11640, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <apache2>, attack: 1

[Assistant] attack


[User] date: 28-Apr-19, time:  04:35:39 , fridge_temperature: 2, temp_condition: low

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 26, dst_ip: 192.168.1.194, dst_port: 26, proto: tcp, service: -, duration: 0.000017, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 80, dst_pkts: 2, dst_ip_bytes: 80, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.33, src_port: 32923, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 1, dst_ip_bytes: 52, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time:    12:41:37   , door_state: open, sphone_signal: true

[Assistant] normal


[User] date: 1-Apr-19, time:  15:00:24 , latitude: 2.04117061, longitude: 12.17190398

[Assistant] normal


[User] date: 1-Apr-19, time:   20:33:28   , fridge_temperature: 13.25, temp_condition: high

[Assistant] normal


[User] PID: 11907, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: worer/u256:0, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 42636, dst_ip: 52.42.83.187, dst_port: 443, proto: tcp, service: -, duration: 61.18613, src_bytes: 0, dst_bytes: 3687, conn_state: SHR, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 12, dst_ip_bytes: 2401, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: TLSv12, ssl_cipher: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, ssl_resumed: F, ssl_established: F, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 1851, TRUN: 0, TSLPI: 2, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: vmtoolsd

[Assistant] normal


[User] PID: 3790, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: ostinato

[Assistant] normal


[User] date: 25-Apr-19, time:  10:07:02 , FC1_Read_Input_Register: 42215, FC2_Read_Discrete_Value: 1564, FC3_Read_Holding_Register: 44005, FC4_Read_Coil: 36004

[Assistant] attack


[User] Processor(_Total) DPC Rate: 15, Processor(_Total) pct_ Idle Time: 80.41666667, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.104166667, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 0.9375, Processor(_Total) pct_ C1 Time: 86.66666667, Processor(_Total) pct_ Processor Time: 19.58333333, Processor(_Total) C1 Transitions sec: 2480.189815, Processor(_Total) pct_ DPC Time: 0.416666667, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 18.64583333, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 2206.524272, Processor(_Total) Interrupts sec: 3365.119514, Process(_Total) Pool Paged Bytes: 7884216, Process(_Total) IO Read Operations sec: 2.133324572, Process(_Total) Working Set - Private: 792186880, Process(_Total) Working Set Peak: 2016894976, Process(_Total) IO Write Operations sec: 1.533327036, Process(_Total) Page File Bytes: 2078863360, Process(_Total) pct_ User Time: 0.9375, Process(_Total) Virtual Bytes Peak: 8080961536, Process(_Total) Page File Bytes Peak: 2701778944, Process(_Total) IO Other Bytes sec: 1919.592117, Process(_Total) Private Bytes: 2078863360, Process(_Total) IO Write Bytes sec: 789.196759, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6820532224, Process(_Total) pct_ Processor Time: 99.47916667, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1057592, Process(_Total) Working Set: 846499840, Process(_Total) Page Faults sec: 4939.046384, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 96.93293526, Process(_Total) IO Data Operations sec: 3.666651609, Process(_Total) Thread Count: 562, Process(_Total) pct_ Privileged Time: 98.54166667, Process(_Total) IO Data Bytes sec: 1028.662442, Process(_Total) IO Read Bytes sec: 239.4656833, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13762, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 82.26632883, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 76.79968461, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 159.0660134, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 1.066662286, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 1.066662286, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 2.133324572, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 1.066662286, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 1.066662286, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 92684288, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 716800, Memory Available Bytes: 851968, Memory Commit Limit: 2918703104, Memory Transition Pages RePurposed sec: 6234.374398, Memory Pages Output sec: 2159.257799, Memory Page Reads sec: 2000.991783, Memory Demand Zero Faults sec: 1104.195465, Memory Available KBytes: 832, Memory Pages sec: 9402.894719, Memory Cache Bytes: 356352, Memory Pool Nonpaged Bytes: 69521408, Memory Page Faults sec: 5064.645868, Memory Transition Faults sec: 1962.791939, Memory System Cache Resident Bytes: 356352, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 237.1323595, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 364544, Memory System Driver Resident Bytes: 1241088, Memory Standby Cache Normal Priority Bytes: 487424, Memory Pool Paged Allocs: 59205, Memory Pool Nonpaged Allocs: 55684, Memory pct_ Committed Bytes In Use: 83.60900061, Memory Free System Page Table Entries: 33562140, Memory Available MBytes: 0, Memory Modified Page List Bytes: 65536, Memory Cache Faults sec: 0.46666475, Memory Committed Bytes: 2440298496, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 7243.636919, Memory Pool Paged Resident Bytes: 10956800, Memory Write Copies sec: 0

[Assistant] normal


[User] date: 26-Apr-19, time: 16:32:04, fridge_temperature: 4, temp_condition: low

[Assistant] attack


[User] src_ip: 192.168.1.37, src_port: 42565, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time: 5:02:14, temperature: 26.82834247, pressure: -0.909284129, humidity: 29.9489569

[Assistant] attack


[User] date: 2-Apr-19, time:    04:05:49   , door_state: open, sphone_signal: true

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 33332, dst_ip: 13.107.5.88, dst_port: 443, proto: tcp, service: ssl, duration: 0.381628, src_bytes: 269, dst_bytes: 4743, conn_state: RSTR, missed_bytes: 0, src_pkts: 10, src_ip_bytes: 689, dst_pkts: 10, dst_ip_bytes: 5155, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 42932, dst_ip: 52.59.177.21, dst_port: 80, proto: tcp, service: http, duration: 1.337372, src_bytes: 528, dst_bytes: 12183, conn_state: SF, missed_bytes: 0, src_pkts: 7, src_ip_bytes: 900, dst_pkts: 12, dst_ip_bytes: 12815, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.79, src_port: 40898, dst_ip: 192.168.1.255, dst_port: 15600, proto: udp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 63, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time:    12:40:45   , fridge_temperature: 2.35, temp_condition: low

[Assistant] normal


[User] src_ip: 192.168.1.184, src_port: 8080, dst_ip: 192.168.1.184, dst_port: 1518, proto: tcp, service: -, duration: 0.269717, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 6452, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 1, Status: 0, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] attack


[User] date: 28-Apr-19, time:  20:21:04 , fridge_temperature: 5.65, temp_condition: low

[Assistant] attack


[User] date: 31-Mar-19, time:    12:40:34   , fridge_temperature: 3, temp_condition: low

[Assistant] normal


[User] date: 27-Apr-19, time:  05:33:17 , fridge_temperature: 3, temp_condition: low

[Assistant] attack


[User] date: 28-Apr-19, time:  05:22:34 , current_temperature: 25, thermostat_status: 0

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 41414, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000038, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 1371, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: irqbalance

[Assistant] normal


[User] PID: 3793, TRUN: 1, TSLPI: 11, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0.98, CMD: drone

[Assistant] normal


[User] PID: 4396, MINFLT: 0, MAJFLT: 0, VSTEXT: 0, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: worer/u256:1

[Assistant] normal


[User] date: 1-Apr-19, time:  20:45:44 , current_temperature: 31.05608643, thermostat_status: 1

[Assistant] normal


[User] PID: 3675, MINFLT: 2075, MAJFLT: 0, VSTEXT: 148, VSIZE: 17948, RSIZE: 2604, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] PID: 6450, TRUN: 1, TSLPI: 0, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 3, Status: 0, EXC: 0, State: R, CPU: 0.01, CMD: atop

[Assistant] attack


[User] date: 31-Mar-19, time: 12:38:35, latitude: 0.341618608, longitude: 10.36578304

[Assistant] normal


[User] PID: 4075, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 0

[Assistant] normal


[User] date: 25-Apr-19, time:  08:35:31 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:37, FC1_Read_Input_Register: 4310, FC2_Read_Discrete_Value: 61502, FC3_Read_Holding_Register: 44131, FC4_Read_Coil: 4964

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 56178, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.043682, src_bytes: 66, dst_bytes: 232, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 122, dst_pkts: 2, dst_ip_bytes: 288, dns_query: trc.taboola.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  04:55:50 , current_temperature: 27.66130686, thermostat_status: 1

[Assistant] attack


[User] date: 1-Apr-19, time:  19:21:10 , current_temperature: 25.15054291, thermostat_status: 0

[Assistant] normal


[User] PID: 4372, MINFLT: 2078, MAJFLT: 0, VSTEXT: 148, VSIZE: 17644, RSIZE: 2440, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] date: 28-Apr-19, time:  04:43:12 , latitude: 9.774364232, longitude: 19.1196701

[Assistant] attack


[User] PID: 3047, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: nm-applet, attack: 1

[Assistant] attack


[User] PID: 2256, MINFLT: 132, MAJFLT: 243.8, VSTEXT: 6068, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: gsd-mouse

[Assistant] attack


[User] PID: 2433, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: dbus-daemon, attack: 0

[Assistant] normal


[User] date: 26-Apr-19, time: 16:09:23, fridge_temperature: 10.5, temp_condition: high

[Assistant] attack


[User] src_ip: 192.168.1.33, src_port: 4444, dst_ip: 192.168.1.193, dst_port: 49226, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 760, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2809, MINFLT: 0, MAJFLT: 0, VSTEXT: 36, VSIZE: 381, RSIZE: 2460, VGROW: 0, RGROW: 0, MEM: 0, CMD: vmtoolsd

[Assistant] normal


[User] PID: 1442, MINFLT: 0, MAJFLT: 0, VSTEXT: 2219, VSIZE: 772.2, RSIZE: 131.8, VGROW: 0, RGROW: 0, MEM: 0.04, CMD: Xorg

[Assistant] normal


[User] date: 28-Apr-19, time:  20:53:10 , fridge_temperature: 8.4, temp_condition: high

[Assistant] attack


[User] src_ip: 192.168.1.37, src_port: 8001, dst_ip: 192.168.1.193, dst_port: 49162, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 163, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: fe80::76:ad3e:1329:a7fd, src_port: 5353, dst_ip: ff02::fb, dst_port: 5353, proto: udp, service: dns, duration: 4.068299, src_bytes: 270, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 3, src_ip_bytes: 414, dst_pkts: 0, dst_ip_bytes: 0, dns_query: _sleep-proxy._udp.local, dns_qclass: 32769, dns_qtype: 12, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 3132, TRUN: 0, TSLPI: 22, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: Web Content

[Assistant] attack


[User] PID: 1304, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: dovecot

[Assistant] normal


[User] PID: 3711, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 5, Status: -, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] PID: 1400, MINFLT: 10, MAJFLT: 0, VSTEXT: 37, VSIZE: 23652, RSIZE: 1028, VGROW: 0, RGROW: 0, MEM: 0, CMD: cron

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 60740, dst_ip: 192.168.1.195, dst_port: 21, proto: tcp, service: -, duration: 3.040989, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 3, src_ip_bytes: 180, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 26-Apr-19, time:  16:49:42 , motion_status: 0, light_status:  off

[Assistant] attack


[User] PID: 10430, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <apache2>, attack: 1

[Assistant] attack


[User] PID: 4399, MINFLT: 0, MAJFLT: 0, VSTEXT: 596, VSIZE: 184.3, RSIZE: 5668, VGROW: 0, RGROW: 0, MEM: 0, CMD: apache2

[Assistant] attack


[User] PID: 2849, MINFLT: 8, MAJFLT: 0, VSTEXT: 1350, VSIZE: 1.4, RSIZE: 48316, VGROW: 0, RGROW: 0, MEM: 0.01, CMD: nautilus

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 37158, dst_ip: 192.168.1.152, dst_port: 80, proto: tcp, service: http, duration: 0.051152, src_bytes: 183, dst_bytes: 3440, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 451, dst_pkts: 6, dst_ip_bytes: 3760, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 45, dst_ip: 192.168.1.194, dst_port: 45, proto: tcp, service: -, duration: 0.000014, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 1-Apr-19, time:  17:14:09 , latitude: 75.79564817, longitude: 83.4414871

[Assistant] normal


[User] src_ip: 192.168.1.195, src_port: 1807, dst_ip: 192.168.1.195, dst_port: 1807, proto: tcp, service: -, duration: 0.199761, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.133, src_port: 5353, dst_ip: 224.0.0.251, dst_port: 5353, proto: udp, service: dns, duration: 3.93824, src_bytes: 270, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 3, src_ip_bytes: 354, dst_pkts: 0, dst_ip_bytes: 0, dns_query: _sleep-proxy._udp.local, dns_qclass: 32769, dns_qtype: 12, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.133, src_port: 5353, dst_ip: 224.0.0.251, dst_port: 5353, proto: udp, service: dns, duration: 0.928978, src_bytes: 122, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 178, dst_pkts: 0, dst_ip_bytes: 0, dns_query: _233637de._sub._googlecast._tcp.local, dns_qclass: 1, dns_qtype: 12, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 28-Apr-19, time: 14:29:49, motion_status: 0, light_status:  off

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:52, temperature: 36.25194886, pressure: 1.213695408, humidity: 52.55355363

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 1880, dst_ip: 192.168.1.152, dst_port: 51782, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 53398, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.106445, src_bytes: 147, dst_bytes: 651, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 415, dst_pkts: 5, dst_ip_bytes: 919, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2925, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: nautilus, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.79, src_port: 39324, dst_ip: 192.168.1.255, dst_port: 15600, proto: udp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 63, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 26-Apr-19, time:  16:32:03 , temperature: 38.57088425, pressure: 0.844680699, humidity: 18.22906461

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 54930, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.00268, src_bytes: 84, dst_bytes: 436, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 140, dst_pkts: 2, dst_ip_bytes: 492, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:  04:06:32 , motion_status: 1, light_status:  on

[Assistant] normal


[User] date: 1-Apr-19, time:  20:47:43 , motion_status: 0, light_status:  off

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 38156, dst_ip: 192.168.1.152, dst_port: 80, proto: tcp, service: -, duration: 5.063336, src_bytes: 0, dst_bytes: 2229, conn_state: SHR, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 104, dst_pkts: 3, dst_ip_bytes: 2385, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1542, TRUN: 0, TSLPI: 17, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: 0, EXC: 0, State: S, CPU: 0, CMD: mysqld

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 11, dst_ip: 192.168.1.169, dst_port: 0, proto: icmp, service: -, duration: 0.000004, src_bytes: 226, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 282, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.195, src_port: 1380, dst_ip: 192.168.1.195, dst_port: 1380, proto: tcp, service: -, duration: 0.195121, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 60067, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.01209, src_bytes: 84, dst_bytes: 424, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 140, dst_pkts: 2, dst_ip_bytes: 480, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 59448, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.262816, src_bytes: 84, dst_bytes: 424, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 140, dst_pkts: 2, dst_ip_bytes: 480, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 55890, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000062, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 11142, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <imap-login>, attack: 1

[Assistant] attack


[User] Processor(_Total) DPC Rate: 42, Processor(_Total) pct_ Idle Time: 65.83333333, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.104166667, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 2.916666667, Processor(_Total) pct_ C1 Time: 66.66666667, Processor(_Total) pct_ Processor Time: 34.16666667, Processor(_Total) C1 Transitions sec: 3489.129542, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 31.25, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 3548.462811, Processor(_Total) Interrupts sec: 4867.061378, Process(_Total) Pool Paged Bytes: 7821192, Process(_Total) IO Read Operations sec: 9.199990003, Process(_Total) Working Set - Private: 690712576, Process(_Total) Working Set Peak: 2054631424, Process(_Total) IO Write Operations sec: 0.866665725, Process(_Total) Page File Bytes: 1923149824, Process(_Total) pct_ User Time: 2.916666667, Process(_Total) Virtual Bytes Peak: 7961366528, Process(_Total) Page File Bytes Peak: 2266394624, Process(_Total) IO Other Bytes sec: 6951.12578, Process(_Total) Private Bytes: 1923149824, Process(_Total) IO Write Bytes sec: 5840.393653, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6835486720, Process(_Total) pct_ Processor Time: 99.89583333, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1055888, Process(_Total) Working Set: 744235008, Process(_Total) Page Faults sec: 4425.195191, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 290.1996846, Process(_Total) IO Data Operations sec: 10.06665573, Process(_Total) Thread Count: 544, Process(_Total) pct_ Privileged Time: 96.97916667, Process(_Total) IO Data Bytes sec: 6101.460036, Process(_Total) IO Read Bytes sec: 261.066383, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13840, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 2918.530162, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 205.7997764, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 3124.329938, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 3.199996523, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 6.999992393, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 10.19998892, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 3.199996523, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 6.999992393, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 98009088, Memory Free & Zero Page List Bytes: 81920, Memory Cache Bytes Peak: 80883712, Memory System Code Resident Bytes: 733184, Memory Available Bytes: 52748288, Memory Commit Limit: 2517131264, Memory Transition Pages RePurposed sec: 5979.460169, Memory Pages Output sec: 4666.328263, Memory Page Reads sec: 2819.13027, Memory Demand Zero Faults sec: 1125.33211, Memory Available KBytes: 51512, Memory Pages sec: 12225.65338, Memory Cache Bytes: 487424, Memory Pool Nonpaged Bytes: 56696832, Memory Page Faults sec: 4710.261548, Memory Transition Faults sec: 761.7991722, Memory System Cache Resident Bytes: 487424, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 802.6657944, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 31248384, Memory System Driver Resident Bytes: 1327104, Memory Standby Cache Normal Priority Bytes: 21417984, Memory Pool Paged Allocs: 62429, Memory Pool Nonpaged Allocs: 53580, Memory pct_ Committed Bytes In Use: 90.64592032, Memory Free System Page Table Entries: 33563833, Memory Available MBytes: 50, Memory Modified Page List Bytes: 18415616, Memory Cache Faults sec: 4.933327972, Memory Committed Bytes: 2281676800, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 7559.325119, Memory Pool Paged Resident Bytes: 10899456, Memory Write Copies sec: 0

[Assistant] normal


[User] PID: 2060, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: gnome-shell, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 61173, dst_ip: 192.168.1.186, dst_port: 10628, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:    04:05:15   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 89, dst_ip: 192.168.1.184, dst_port: 89, proto: tcp, service: -, duration: 0.000531, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2240, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: gsd-xsettings, attack: 1

[Assistant] attack


[User] date: 28-Apr-19, time:  11:50:45 , temperature: 43.99129553, pressure: 6.190267443, humidity: 86.3385467

[Assistant] attack


[User] PID: 2221, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: pulseaudio, attack: 1

[Assistant] attack


[User] src_ip: 2405:6e00:10ce:2c00:20c:29ff:feee:e07a, src_port: 6079, dst_ip: 2001:503:c27::2:30, dst_port: 53, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 91, dst_pkts: 0, dst_ip_bytes: 0, dns_query: akamaiedge.net, dns_qclass: 1, dns_qtype: 43, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 28-Apr-19, time: 16:21:37, motion_status: 0, light_status:  off

[Assistant] attack


[User] date: 31-Mar-19, time: 12:42:01, temperature: 39.31613852, pressure: 1.201476127, humidity: 35.42443453

[Assistant] normal


[User] PID: 4639, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: 0, EXC: 0, State: S, CPU: 0, CMD: kworker/u256:2

[Assistant] attack


[User] PID: 2792, TRUN: 0, TSLPI: 5, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: 0, EXC: 0, State: S, CPU: 0, CMD: evolution-cale

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:20, temperature: 48.04576002, pressure: 1.263004345, humidity: 42.64555513

[Assistant] normal


[User] date: 25-Apr-19, time: 10:07:35, motion_status: 1, light_status:  on

[Assistant] attack


[User] PID: 4373, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 71, dst_ip: 192.168.1.190, dst_port: 71, proto: tcp, service: -, duration: 0.000136, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 14647, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: worer/u256:1, attack: 1

[Assistant] attack


[User] PID: 3675, MINFLT: 2072, MAJFLT: 0, VSTEXT: 148, VSIZE: 17948, RSIZE: 2604, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] src_ip: 2405:6e00:10ce:2c00:20c:29ff:feee:e07a, src_port: 63843, dst_ip: 2001:500:1::803f:235, dst_port: 53, proto: udp, service: dns, duration: 0.227094, src_bytes: 28, dst_bytes: 1097, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 76, dst_pkts: 1, dst_ip_bytes: 1145, dns_query: (empty), dns_qclass: 1, dns_qtype: 2, dns_rcode: 0, dns_AA: T, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 34, dst_ip: 192.168.1.190, dst_port: 34, proto: tcp, service: -, duration: 0.000254, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 25-Apr-19, time: 8:47:47, latitude: 98.86516065, longitude: 108.5447484

[Assistant] attack


[User] PID: 1483, TRUN: 0, TSLPI: 17, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: mysqld

[Assistant] normal


[User] PID: 2809, MINFLT: 0, MAJFLT: 0, VSTEXT: 36, VSIZE: 381, RSIZE: 3136, VGROW: 0, RGROW: 0, MEM: 0, CMD: vmtoolsd

[Assistant] normal


[User] PID: 3678, MINFLT: 2066, MAJFLT: 0, VSTEXT: 148, VSIZE: 17948, RSIZE: 2608, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.79, src_port: 41009, dst_ip: 192.168.1.255, dst_port: 15600, proto: udp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 63, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 4207, TRUN: 0, TSLPI: 11, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 5, Status: -, EXC: 0, State: S, CPU: 0, CMD: node-red

[Assistant] attack


[User] date: 2-Apr-19, time:    04:01:45   , fridge_temperature: 11.95, temp_condition: high

[Assistant] normal


[User] PID: 5843, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 0

[Assistant] normal


[User] date: 26-Apr-19, time:  15:12:19 , current_temperature: 26.44220364, thermostat_status: 1

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 49965, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.062344, src_bytes: 82, dst_bytes: 218, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 138, dst_pkts: 2, dst_ip_bytes: 274, dns_query: stats.g.doubleclick.net, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 26-Apr-19, time:  13:58:25 , current_temperature: 30.44098034, thermostat_status: 1

[Assistant] attack


[User] PID: 2547, MINFLT: 0, MAJFLT: 0, VSTEXT: 66, VSIZE: 710.1, RSIZE: 14116, VGROW: 0, RGROW: 0, MEM: 0, CMD: unity-panel-se

[Assistant] normal


[User] PID: 3793, TRUN: 1, TSLPI: 11, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0.99, CMD: drone

[Assistant] normal


[User] PID: 5843, RDDSK: 0, WRDSK: 8, WCANCL: 0, DSK: 0.07, CMD: apache2, attack: 0

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:22, motion_status: 0, light_status:  off

[Assistant] normal


[User] PID: 2870, MINFLT: 0, MAJFLT: 0, VSTEXT: 71, VSIZE: 195.6, RSIZE: 1660, VGROW: 0, RGROW: 20, MEM: 0, CMD: gvfs-mtp-volum

[Assistant] normal


[User] PID: 3294, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 1, Status: 0, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] attack


[User] PID: 2261, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: gsd-color, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 47888, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 30.335123, src_bytes: 0, dst_bytes: 0, conn_state: SF, missed_bytes: 0, src_pkts: 4, src_ip_bytes: 216, dst_pkts: 2, dst_ip_bytes: 112, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:06, current_temperature: 30.75450772, thermostat_status: 1

[Assistant] normal


[User] date: 2-Apr-19, time:  04:06:44 , current_temperature: 27.51027175, thermostat_status: 1

[Assistant] normal


[User] src_ip: 192.168.1.133, src_port: 5353, dst_ip: 224.0.0.251, dst_port: 5353, proto: udp, service: dns, duration: 6.661762, src_bytes: 408, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 576, dst_pkts: 0, dst_ip_bytes: 0, dns_query: _sleep-proxy._udp.local, dns_qclass: 32769, dns_qtype: 12, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 38680, dst_ip: 18.194.169.124, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3273, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: 0, EXC: 0, State: S, CPU: 0, CMD: deja-dup-monit

[Assistant] attack


[User] src_ip: 192.168.1.37, src_port: 39781, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 70, dst_ip: 176.28.50.165, dst_port: 70, proto: tcp, service: -, duration: 0.007768, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 8, src_ip_bytes: 320, dst_pkts: 2, dst_ip_bytes: 80, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 25-Apr-19, time:  16:19:27 , latitude: 45.83543589, longitude: 57.17412276

[Assistant] attack


[User] PID: 3292, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 2, Status: 0, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] attack


[User] date: 28-Apr-19, time:  04:18:11 , motion_status: 0, light_status:  off

[Assistant] attack


[User] src_ip: 192.168.1.190, src_port: 1535, dst_ip: 192.168.1.190, dst_port: 1535, proto: tcp, service: -, duration: 0.226726, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 53, dst_ip: 192.168.1.184, dst_port: 53, proto: tcp, service: -, duration: 0.000004, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 1-Apr-19, time:  20:43:22 , motion_status: 0, light_status:  off

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 53037, dst_ip: 192.168.1.49, dst_port: 8800, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 60344, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 0.203415, src_bytes: 238, dst_bytes: 1951, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 458, dst_pkts: 5, dst_ip_bytes: 2163, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3676, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 47334, dst_ip: 192.168.1.152, dst_port: 21, proto: tcp, service: -, duration: 0.021591, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 60, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:14, temperature: 47.20467305, pressure: 0.407333595, humidity: 46.5751754

[Assistant] normal


[User] src_ip: 192.168.1.190, src_port: 61200, dst_ip: 84.53.139.64, dst_port: 53, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 81, dst_pkts: 0, dst_ip_bytes: 0, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 57746, dst_ip: 117.18.237.29, dst_port: 80, proto: tcp, service: http, duration: 140.018334, src_bytes: 1293, dst_bytes: 2206, conn_state: SF, missed_bytes: 0, src_pkts: 23, src_ip_bytes: 2497, dst_pkts: 19, dst_ip_bytes: 3202, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 26-Apr-19, time: 14:45:00, door_state: closed, sphone_signal: 0

[Assistant] attack


[User] PID: 1464, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] date: 1-Apr-19, time:  15:13:27 , latitude: 9.387019263, longitude: 18.03699082

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:14, current_temperature: 26.26631436, thermostat_status: 1

[Assistant] normal


[User] PID: 3793, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: drone, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 40316, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.002776, src_bytes: 54, dst_bytes: 54, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 82, dst_pkts: 1, dst_ip_bytes: 82, dns_query: testphp.vulnweb.com/listproducts.php, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: T, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2843, MINFLT: 2736, MAJFLT: 0, VSTEXT: 38, VSIZE: 323.9, RSIZE: 9564, VGROW: 323.9, RGROW: 9564, MEM: 0, CMD: polkit-gnome-a

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:15, latitude: 0.186802625, longitude: 10.26111305

[Assistant] normal


[User] PID: 5234, MINFLT: 221, MAJFLT: 0, VSTEXT: 152, VSIZE: 29840, RSIZE: 952, VGROW: 29840, RGROW: 952, MEM: 0, CMD: vsftpd

[Assistant] attack


[User] PID: 4373, MINFLT: 2075, MAJFLT: 0, VSTEXT: 148, VSIZE: 17972, RSIZE: 2500, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.17, src_port: 60386, dst_ip: 224.0.0.252, dst_port: 5355, proto: udp, service: dns, duration: 0.390534, src_bytes: 66, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 122, dst_pkts: 0, dst_ip_bytes: 0, dns_query: desktop-p3kklkq, dns_qclass: 1, dns_qtype: 255, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 2743, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: gnome-terminal, attack: 1

[Assistant] attack


[User] date: 28-Apr-19, time:  05:13:08 , motion_status: 1, light_status:  on

[Assistant] attack


[User] date: 26-Apr-19, time:  14:55:18 , temperature: 40.01196879, pressure: 2.000230797, humidity: 5.717145053

[Assistant] attack


[User] PID: 1483, MINFLT: 0, MAJFLT: 0, VSTEXT: 10415, VSIZE: 537.4, RSIZE: 9928, VGROW: 0, RGROW: 0, MEM: 0, CMD: mysqld

[Assistant] normal


[User] date: 27-Apr-19, time:  05:36:57 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] PID: 2523, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: unity-settings

[Assistant] normal


[User] date: 28-Apr-19, time:  11:54:52 , temperature: 36.81720957, pressure: -0.020569694, humidity: 54.7953525

[Assistant] attack


[User] date: 28-Apr-19, time:  11:54:11 , FC1_Read_Input_Register: 36059, FC2_Read_Discrete_Value: 938, FC3_Read_Holding_Register: 52524, FC4_Read_Coil: 35946

[Assistant] attack


[User] date: 25-Apr-19, time: 9:22:20, motion_status: 0, light_status:  off

[Assistant] attack


[User] PID: 4075, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] PID: 2633, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: 0, EXC: 0, State: S, CPU: 0.01, CMD: unity-panel-se

[Assistant] attack


[User] PID: 2938, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: nautilus, attack: 0

[Assistant] normal


[User] PID: 4075, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] date: 28-Apr-19, time:  18:15:10 , current_temperature: 27.81890494, thermostat_status: 1

[Assistant] attack


[User] date: 25-Apr-19, time:  15:45:18 , motion_status: 1, light_status:  on

[Assistant] attack


[User] date: 31-Mar-19, time:    12:41:59   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] date: 25-Apr-19, time:  09:25:57 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] PID: 3405, MINFLT: 0, MAJFLT: 0, VSTEXT: 0, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: kworker/u256:2

[Assistant] attack


[User] date: 25-Apr-19, time:  18:08:39 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] Processor_DPC_Rate: 83, Processor_pct_ Idle_Time: 29.9661665, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.156494211, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 33.95924374, Processor_pct_ C1_Time: 29.9661665, Processor_pct_ Processor_Time: 67.29270995, Processor_C1_ransitions_sec: 2969.729392, Processor_pct_ DPC_Time: 0.782471054, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 33.3332669, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 3533.007464, Processor_Interrupts_sec: 8352.820878, Process_Pool_Paged Bytes: 22502976, Process_IO Read_Operations_sec: 0.500780647, Process_Working_Set_ Private: 2199498752, Process_Working_Set_Peak: 6343217152, Process_IO_Write Operations_sec: 3.405308399, Process_Page_File Bytes: 4507746304, Process_pct_ User_Time: 67.29251064, Process_Virtual_Bytes Peak: 1.55E+14, Process_Page_File Bytes Peak: 5578702848, Process_IO_Other_Bytes_sec: 11139.76533, Process_Private_Bytes: 4507746304, Process_IO_Write_Bytes_sec: 10720.11115, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.55E+14, Process_pct_ Processor_Time: 195.4612693, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2834584, Process_Working Set: 2265841664, Process_Page Faults_sec: 10637.78281, Process_ID Process: 0, Process_IO Other Operations_sec: 233.1634692, Process_IO Data Operations_sec: 3.906089046, Process_Thread Count: 1063, Process_pct_ Privileged_Time: 128.1687586, Process_IO Data Bytes_sec: 10721.11271, Process_IO Read Bytes_sec: 1.001561294, Process_Priority Base: 0, Process_Handle Count: 40328, Network_I(Intel R _82574L_GNC)TCP_APS: 5517, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4790.067044, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 205.5203775, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 4995.587421, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 3.805932917, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 5.909211634, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 9.71514455, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 1, Network_I(Intel R _82574L_GNC) Packets Sent sec: 3.805932917, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 5.909211634, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 138207232, Memory Free & Zero Page List Bytes: 1990656, Memory Cache Bytes Peak: 157425664, Memory System Code Resident Bytes: 0, Memory Available Bytes: 162496512, Memory Commit Limit: 8459431936, Memory Transition Pages RePurposed sec: 9304.704732, Memory Pages Output sec: 1023.695798, Memory Page Reads sec: 3807.435259, Memory Demand Zero Faults sec: 2020.750066, Memory Available KBytes: 158688, Memory Pages sec: 16052.92426, Memory Cache Bytes: 1048576, Memory Pool Nonpaged Bytes: 120209408, Memory Page Faults sec: 12481.35669, Memory Transition Faults sec: 4006.245175, Memory System Cache Resident Bytes: 1048576, Memory Long-Term Average Standby Cache Lifetime (s): 19, Memory Standby Cache Reserve Bytes: 1048576, Memory Page Writes sec: 98.95425583, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 144830464, Memory System Driver Resident Bytes: 1.76E+13, Memory Standby Cache Normal Priority Bytes: 14618624, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 64.24605538, Memory Free System Page Table Entries: 12213454, Memory Available MBytes: 154, Memory Modified Page List Bytes: 2363392, Memory Cache Faults sec: 6.810616798, Memory Committed Bytes: 5434851328, Memory System Driver Total Bytes: 18264064, Memory Pages Input sec: 15029.22846, Memory Pool Paged Resident Bytes: 28897280, Memory Write Copies sec: 48.0749421, LogicalDisk(_Total) Avg  Disk Bytes Write: 41715.06046, LogicalDisk(_Total) pct_ Idle Time: 73.25472072, LogicalDisk(_Total) Disk Reads sec: 3765.670153, LogicalDisk(_Total) pct_ Free Space: 81.01171194, LogicalDisk(_Total) Disk Read Bytes sec: 61971138.73, LogicalDisk(_Total) Avg  Disk sec Read: 0.000268837, LogicalDisk(_Total) Disk Writes sec: 101.0575345, LogicalDisk(_Total) Current Disk Queue Length: 1, LogicalDisk(_Total) Split IO Sec: 1.001561294, LogicalDisk(_Total) Free Megabytes: 165801, LogicalDisk(_Total) Avg  Disk sec Write: 0.000228975, LogicalDisk(_Total) Disk Bytes sec: 66186759.89, LogicalDisk(_Total) Avg  Disk Read Queue Length: 1.012353398, LogicalDisk(_Total) pct_ Disk Time: 34.51643725, LogicalDisk(_Total) Avg  Disk Bytes Read: 16456.86856, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.02313972, LogicalDisk(_Total) Avg  Disk Queue Length: 1.035493117, LogicalDisk(_Total) pct_ Disk Read Time: 33.74511259, LogicalDisk(_Total) Disk Write Bytes sec: 4215621.163, LogicalDisk(_Total) Disk Transfers sec: 3866.727687, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 17116.99536, LogicalDisk(_Total) pct_ Disk Write Time: 0.771323658, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000267795

[Assistant] normal


[User] PID: 2882, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: 0, EXC: 0, State: S, CPU: 0, CMD: vmtoolsd

[Assistant] attack