[User] src_ip: 192.168.1.1, src_port: 56504, dst_ip: 192.168.1.195, dst_port: 52955, proto: udp, service: -, duration: 3.188286, src_bytes: 5116, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 16, src_ip_bytes: 5564, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 1-Apr-19, time:  20:14:05 , motion_status: 0, light_status:  off

[Assistant] normal


[User] PID: 4004, MINFLT: 1121, MAJFLT: 0, VSTEXT: 0, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: <dhclient>

[Assistant] attack


[User] PID: 3257, TRUN: 0, TSLPI: 22, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0.12, CMD: Web-Content

[Assistant] normal


[User] date: 28-Apr-19, time:  09:05:48 , latitude: 40.8798314, longitude: 50.43409843

[Assistant] attack


[User] PID: 2547, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: unity-panel-se

[Assistant] normal


[User] date: 26-Apr-19, time:  15:29:36 , motion_status: 0, light_status:  off

[Assistant] attack


[User] date: 31-Mar-19, time:    12:44:46   , fridge_temperature: 12.65, temp_condition: high

[Assistant] normal


[User] PID: 4651, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: N, EXC: 0, State: S, CPU: 0, CMD: vsftpd

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 54808, dst_ip: 192.168.1.49, dst_port: 1094, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.195, src_port: 54340, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 75, dst_pkts: 0, dst_ip_bytes: 0, dns_query: v10.events.data.microsoft.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 2-Apr-19, time:  04:06:29 , motion_status: 0, light_status:  off

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 50, dst_ip: 192.168.1.184, dst_port: 50, proto: tcp, service: -, duration: 0.000166, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3155, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: gnome-terminal

[Assistant] normal


[User] date: 25-Apr-19, time:  09:36:07 , FC1_Read_Input_Register: 9167, FC2_Read_Discrete_Value: 43755, FC3_Read_Holding_Register: 32121, FC4_Read_Coil: 40052

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 48332, dst_ip: 40.90.189.152, dst_port: 443, proto: tcp, service: ssl, duration: 0.630442, src_bytes: 269, dst_bytes: 3642, conn_state: S2, missed_bytes: 0, src_pkts: 8, src_ip_bytes: 609, dst_pkts: 5, dst_ip_bytes: 3854, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 33933, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000023, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 2127, TRUN: 0, TSLPI: 11, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 5, Status: -, EXC: 0, State: S, CPU: 0, CMD: gnome-shell

[Assistant] attack


[User] PID: 2433, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: dbus-daemon, attack: 0

[Assistant] normal


[User] PID: 2823, TRUN: 0, TSLPI: 11, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: node-red

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:24, FC1_Read_Input_Register: 2627, FC2_Read_Discrete_Value: 14283, FC3_Read_Holding_Register: 46669, FC4_Read_Coil: 41205

[Assistant] normal


[User] date: 28-Apr-19, time: 21:24:10, motion_status: 0, light_status:  off

[Assistant] attack


[User] date: 25-Apr-19, time: 9:13:27, current_temperature: 27.41631727, thermostat_status: 1

[Assistant] attack


[User] PID: 3894, RDDSK: 0, WRDSK: 20, WCANCL: 0, DSK: 0.07, CMD: atop, attack: 0

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:08, latitude: 3.847889339, longitude: 13.55347525

[Assistant] normal


[User] date: 26-Apr-19, time:  16:44:21 , temperature: 34.0052499, pressure: 2.894414755, humidity: 70.47543214

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49768, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.00015, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 1-Apr-19, time:  19:29:32 , current_temperature: 29.52933227, thermostat_status: 1

[Assistant] normal


[User] PID: 1480, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: mysqld, attack: 0

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:44, temperature: 37.90262824, pressure: 2.501641307, humidity: 41.07286071

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 5, dst_ip: 192.168.1.195, dst_port: 1, proto: icmp, service: -, duration: 10.490619, src_bytes: 320, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 8, src_ip_bytes: 544, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:45, FC1_Read_Input_Register: 41510, FC2_Read_Discrete_Value: 58421, FC3_Read_Holding_Register: 36806, FC4_Read_Coil: 60619

[Assistant] normal


[User] PID: 3950, MINFLT: 0, MAJFLT: 0, VSTEXT: 0, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: kworker/u256:1

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 44, dst_ip: 192.168.1.184, dst_port: 44, proto: tcp, service: -, duration: 0.000018, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.180, src_port: 42158, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 59, dst_pkts: 0, dst_ip_bytes: 0, dns_query: elasticsearch, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] Processor(_Total) DPC Rate: 0, Processor(_Total) pct_ Idle Time: 79.375, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.104166667, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 0.3125, Processor(_Total) pct_ C1 Time: 80, Processor(_Total) pct_ Processor Time: 20.625, Processor(_Total) C1 Transitions sec: 2753.166892, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 20.3125, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 2521.308628, Processor(_Total) Interrupts sec: 3780.129675, Process(_Total) Pool Paged Bytes: 7895464, Process(_Total) IO Read Operations sec: 129.461975, Process(_Total) Working Set - Private: 808570880, Process(_Total) Working Set Peak: 2008666112, Process(_Total) IO Write Operations sec: 128.928661, Process(_Total) Page File Bytes: 2274131968, Process(_Total) pct_ User Time: 0.3125, Process(_Total) Virtual Bytes Peak: 7976181760, Process(_Total) Page File Bytes Peak: 2600587264, Process(_Total) IO Other Bytes sec: 4950.62059, Process(_Total) Private Bytes: 2274131968, Process(_Total) IO Write Bytes sec: 32151.36817, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6939566080, Process(_Total) pct_ Processor Time: 99.89583333, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1246656, Process(_Total) Working Set: 862031872, Process(_Total) Page Faults sec: 2812.698068, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 256.5240369, Process(_Total) IO Data Operations sec: 258.3906359, Process(_Total) Thread Count: 559, Process(_Total) pct_ Privileged Time: 99.58333333, Process(_Total) IO Data Bytes sec: 59384.51457, Process(_Total) IO Read Bytes sec: 27233.1464, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13600, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 86.53019748, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 80.39708641, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 166.9272839, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 1.133292263, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 1.133292263, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 2.266584526, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 1.133292263, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 1.133292263, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 91062272, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 696320, Memory Available Bytes: 606208, Memory Commit Limit: 2901925888, Memory Transition Pages RePurposed sec: 3907.725051, Memory Pages Output sec: 3680.666613, Memory Page Reads sec: 2143.122333, Memory Demand Zero Faults sec: 61.79776045, Memory Available KBytes: 592, Memory Pages sec: 7880.314417, Memory Cache Bytes: 327680, Memory Pool Nonpaged Bytes: 52781056, Memory Page Faults sec: 2880.962261, Memory Transition Faults sec: 677.5087804, Memory System Cache Resident Bytes: 327680, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 423.251328, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 155648, Memory System Driver Resident Bytes: 1224704, Memory Standby Cache Normal Priority Bytes: 450560, Memory Pool Paged Allocs: 59081, Memory Pool Nonpaged Allocs: 51757, Memory pct_ Committed Bytes In Use: 90.52617018, Memory Free System Page Table Entries: 33562140, Memory Available MBytes: 0, Memory Modified Page List Bytes: 45056, Memory Cache Faults sec: 0.533314006, Memory Committed Bytes: 2627002368, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 4199.647805, Memory Pool Paged Resident Bytes: 10100736, Memory Write Copies sec: 0.133328502

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 43761, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000022, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 45066, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.003068, src_bytes: 84, dst_bytes: 436, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 140, dst_pkts: 2, dst_ip_bytes: 492, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  04:13:17 , fridge_temperature: 9.1, temp_condition: high

[Assistant] attack


[User] PID: 2576, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: 0, EXC: 0, State: S, CPU: 0, CMD: upstart-dbus-b

[Assistant] attack


[User] date: 1-Apr-19, time:  19:15:22 , current_temperature: 30.53247814, thermostat_status: 1

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49982, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.000146, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 56766, dst_ip: 192.168.1.194, dst_port: 80, proto: tcp, service: -, duration: 25.806851, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 268, dst_pkts: 2, dst_ip_bytes: 120, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2122, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 44685, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 15.422456, src_bytes: 16800, dst_bytes: 44940, conn_state: SF, missed_bytes: 0, src_pkts: 400, src_ip_bytes: 28000, dst_pkts: 198, dst_ip_bytes: 50484, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:33, temperature: 29.16421376, pressure: 1.874107321, humidity: 57.7311363

[Assistant] normal


[User] date: 28-Apr-19, time:  04:37:19 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 43104, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.001829, src_bytes: 170, dst_bytes: 2938, conn_state: SF, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 490, dst_pkts: 7, dst_ip_bytes: 3310, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 46136, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.024994, src_bytes: 76, dst_bytes: 200, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 132, dst_pkts: 2, dst_ip_bytes: 256, dns_query: adservice.google.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 83.21198491, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.312493803, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 3.359308385, Processor_pct_ C1_Time: 83.21198491, Processor_pct_ Processor_Time: 12.42361164, Processor_C1_ransitions_sec: 355.2926383, Processor_pct_ DPC_Time: 0.468740705, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 9.062320294, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 126.6973748, Processor_Interrupts_sec: 795.2835217, Process_Pool_Paged Bytes: 32981072, Process_IO Read_Operations_sec: 74.49845639, Process_Working_Set_ Private: 656490496, Process_Working_Set_Peak: 4795961344, Process_IO_Write Operations_sec: 71.79851233, Process_Page_File Bytes: 2106437632, Process_pct_ User_Time: 6.249876065, Process_Virtual_Bytes Peak: 2.58E+14, Process_Page_File Bytes Peak: 2955059200, Process_IO_Other_Bytes_sec: 36870.73604, Process_Private_Bytes: 2106437632, Process_IO_Write_Bytes_sec: 13357.32324, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 2.58E+14, Process_pct_ Processor_Time: 197.9648244, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 3227416, Process_Working Set: 2209603584, Process_Page Faults_sec: 1412.570732, Process_ID Process: 0, Process_IO Other Operations_sec: 1180.375543, Process_IO Data Operations_sec: 146.2969687, Process_Thread Count: 1589, Process_pct_ Privileged_Time: 191.7149483, Process_IO Data Bytes_sec: 29033.69842, Process_IO Read Bytes_sec: 15676.37519, Process_Priority Base: 0, Process_Handle Count: 57029, Network_I(Intel R _82574L_GNC)TCP_APS: 11180, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 5049.495374, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 11944.8525, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 16994.34788, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 37.39922509, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 43.29910284, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 80.69832793, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 5, Network_I(Intel R _82574L_GNC) Packets Sent sec: 37.39922509, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 43.29910284, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 209514496, Memory Free & Zero Page List Bytes: 562434048, Memory Cache Bytes Peak: 279379968, Memory System Code Resident Bytes: 0, Memory Available Bytes: 1748246528, Memory Commit Limit: 5770170368, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0.699985496, Memory Demand Zero Faults sec: 425.5911818, Memory Available KBytes: 1707272, Memory Pages sec: 0.699985496, Memory Cache Bytes: 77713408, Memory Pool Nonpaged Bytes: 111804416, Memory Page Faults sec: 1650.165809, Memory Transition Faults sec: 1253.174034, Memory System Cache Resident Bytes: 77713408, Memory Long-Term Average Standby Cache Lifetime (s): 14400, Memory Standby Cache Reserve Bytes: 650321920, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 202199040, Memory System Driver Resident Bytes: 1.76E+13, Memory Standby Cache Normal Priority Bytes: 333291520, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 60.06347548, Memory Free System Page Table Entries: 12261002, Memory Available MBytes: 1667, Memory Modified Page List Bytes: 25894912, Memory Cache Faults sec: 39.99917122, Memory Committed Bytes: 3465764864, Memory System Driver Total Bytes: 31289344, Memory Pages Input sec: 0.699985496, Memory Pool Paged Resident Bytes: 149213184, Memory Write Copies sec: 6.699861179, LogicalDisk(_Total) Avg  Disk Bytes Write: 9486.382022, LogicalDisk(_Total) pct_ Idle Time: 99.94261414, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 81.80227985, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 8.899815596, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.199995856, LogicalDisk(_Total) Free Megabytes: 167419, LogicalDisk(_Total) Avg  Disk sec Write: 0.000194229, LogicalDisk(_Total) Disk Bytes sec: 84427.05067, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.057619857, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.001728606, LogicalDisk(_Total) Avg  Disk Queue Length: 0.001728606, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 84427.05067, LogicalDisk(_Total) Disk Transfers sec: 8.899815596, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 9486.382022, LogicalDisk(_Total) pct_ Disk Write Time: 0.057619857, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000194229

[Assistant] attack


[User] src_ip: 192.168.1.33, src_port: 33419, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49888, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000127, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3793, MINFLT: 0, MAJFLT: 0, VSTEXT: 978, VSIZE: 2.9, RSIZE: 12984, VGROW: 0, RGROW: 0, MEM: 0, CMD: drone

[Assistant] normal


[User] src_ip: 192.168.1.184, src_port: 8080, dst_ip: 192.168.1.184, dst_port: 1402, proto: tcp, service: -, duration: 0.187629, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 52890, dst_ip: 52.59.177.21, dst_port: 80, proto: tcp, service: http, duration: 1.346788, src_bytes: 293, dst_bytes: 12183, conn_state: SF, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 613, dst_pkts: 12, dst_ip_bytes: 12815, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.79, src_port: 54205, dst_ip: 192.168.1.255, dst_port: 15600, proto: udp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 63, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 28-Apr-19, time:  08:46:44 , temperature: 38.54166367, pressure: 1.080534015, humidity: 47.88497881

[Assistant] attack


[User] src_ip: 192.168.1.180, src_port: 42630, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.00142, src_bytes: 31, dst_bytes: 106, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 59, dst_pkts: 1, dst_ip_bytes: 134, dns_query: elasticsearch, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 1494, MINFLT: 0, MAJFLT: 0, VSTEXT: 2219, VSIZE: 371, RSIZE: 70940, VGROW: 0, RGROW: 0, MEM: 0.02, CMD: Xorg

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 50948, dst_ip: 192.168.1.250, dst_port: 1122, proto: tcp, service: -, duration: 0.010459, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:    04:05:09   , door_state: open, sphone_signal: true

[Assistant] normal


[User] PID: 3197, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: firefox, attack: 0

[Assistant] normal


[User] date: 1-Apr-19, time:   21:02:04   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:51, temperature: 42.72020447, pressure: 0.743445791, humidity: 33.95515443

[Assistant] normal


[User] date: 25-Apr-19, time:  16:23:22 , fridge_temperature: 6.5, temp_condition: high

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 50100, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000011, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 6827, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: <find>, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 48512, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.00199, src_bytes: 155, dst_bytes: 651, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 423, dst_pkts: 5, dst_ip_bytes: 919, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 14821, RDDSK: 320, WRDSK: 4, WCANCL: 0, DSK: 0.18, CMD: ostinato, attack: 1

[Assistant] attack


[User] PID: 4373, MINFLT: 2073, MAJFLT: 0, VSTEXT: 148, VSIZE: 17644, RSIZE: 2428, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] date: 31-Mar-19, time:    12:43:40   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] date: 26-Apr-19, time:  14:38:43 , motion_status: 0, light_status:  off

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 54600, dst_ip: 54.187.176.55, dst_port: 443, proto: tcp, service: ssl, duration: 61.185059, src_bytes: 922, dst_bytes: 3687, conn_state: SF, missed_bytes: 0, src_pkts: 17, src_ip_bytes: 1814, dst_pkts: 14, dst_ip_bytes: 4423, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1872, TRUN: 0, TSLPI: 2, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: vmtoolsd

[Assistant] attack


[User] PID: 4702, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: 0, EXC: 0, State: S, CPU: 0, CMD: unity-panel-se

[Assistant] attack


[User] date: 1-Apr-19, time:  20:44:51 , current_temperature: 29.74396466, thermostat_status: 1

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 40034, dst_ip: 192.168.1.152, dst_port: 80, proto: tcp, service: http, duration: 6.230156, src_bytes: 324, dst_bytes: 540, conn_state: S3, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 592, dst_pkts: 4, dst_ip_bytes: 756, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2803, MINFLT: 0, MAJFLT: 0, VSTEXT: 127, VSIZE: 388.9, RSIZE: 12720, VGROW: 0, RGROW: 0, MEM: 0, CMD: tracker-store

[Assistant] attack


[User] PID: 5569, RDDSK: 0, WRDSK: 156, WCANCL: 0, DSK: 0.05, CMD: apache2, attack: 1

[Assistant] attack


[User] PID: 2707, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: indicator-eyb, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 31, dst_ip: 176.28.50.165, dst_port: 31, proto: tcp, service: -, duration: 0.019006, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 240, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 35488, dst_ip: 192.168.1.133, dst_port: 49161, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2795, MINFLT: 4, MAJFLT: 0, VSTEXT: 297, VSIZE: 456.9, RSIZE: 5120, VGROW: 0, RGROW: 0, MEM: 0, CMD: nm-applet

[Assistant] normal


[User] Processor(_Total) DPC Rate: 78, Processor(_Total) pct_ Idle Time: 80.05208333, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.208333333, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 5.625, Processor(_Total) pct_ C1 Time: 70, Processor(_Total) pct_ Processor Time: 19.94791667, Processor(_Total) C1 Transitions sec: 7467.357735, Processor(_Total) pct_ DPC Time: 4.270833333, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 14.32291667, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 4051.777067, Processor(_Total) Interrupts sec: 5299.10334, Process(_Total) Pool Paged Bytes: 10222376, Process(_Total) IO Read Operations sec: 6.933294091, Process(_Total) Working Set - Private: 2591326208, Process(_Total) Working Set Peak: 3873566720, Process(_Total) IO Write Operations sec: 5.866633462, Process(_Total) Page File Bytes: 3754209280, Process(_Total) pct_ User Time: 11.14583333, Process(_Total) Virtual Bytes Peak: 11084619776, Process(_Total) Page File Bytes Peak: 4126613504, Process(_Total) IO Other Bytes sec: 9757.678105, Process(_Total) Private Bytes: 3754209280, Process(_Total) IO Write Bytes sec: 14333.78554, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 9834070016, Process(_Total) pct_ Processor Time: 190.8333333, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1545800, Process(_Total) Working Set: 2710388736, Process(_Total) Page Faults sec: 5732.567554, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 514.2637559, Process(_Total) IO Data Operations sec: 12.79992755, Process(_Total) Thread Count: 649, Process(_Total) pct_ Privileged Time: 179.6875, Process(_Total) IO Data Bytes sec: 14730.44996, Process(_Total) IO Read Bytes sec: 396.6644215, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 16710, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 3297.914667, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 541.9969323, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 3839.911599, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 7.799955852, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 10.06660969, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 17.86656554, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 7.799955852, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 10.06660969, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 99516416, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 139370496, Memory System Code Resident Bytes: 24576, Memory Available Bytes: 77963264, Memory Commit Limit: 6070345728, Memory Transition Pages RePurposed sec: 6097.765487, Memory Pages Output sec: 2701.651375, Memory Page Reads sec: 3868.178106, Memory Demand Zero Faults sec: 439.0641816, Memory Available KBytes: 76136, Memory Pages sec: 14613.11729, Memory Cache Bytes: 1703936, Memory Pool Nonpaged Bytes: 70660096, Memory Page Faults sec: 6084.632228, Memory Transition Faults sec: 1775.923282, Memory System Cache Resident Bytes: 1703936, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 497.3971847, Memory System Code Total Bytes: 4370432, Memory Standby Cache Core Bytes: 49922048, Memory System Driver Resident Bytes: 2306048, Memory Standby Cache Normal Priority Bytes: 28037120, Memory Pool Paged Allocs: 61789, Memory Pool Nonpaged Allocs: 65490, Memory pct_ Committed Bytes In Use: 69.54564654, Memory Free System Page Table Entries: 33556544, Memory Available MBytes: 74, Memory Modified Page List Bytes: 3866624, Memory Cache Faults sec: 3.266648177, Memory Committed Bytes: 4221661184, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 11911.46591, Memory Pool Paged Resident Bytes: 18608128, Memory Write Copies sec: 7.733289563

[Assistant] attack


[User] PID: 11698, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 1880, dst_ip: 192.168.1.152, dst_port: 51782, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 2838, MINFLT: 0, MAJFLT: 0, VSTEXT: 4, VSIZE: 857.6, RSIZE: 44596, VGROW: 0, RGROW: 0, MEM: 0.01, CMD: evolution-cale

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 51866, dst_ip: 172.217.25.162, dst_port: 443, proto: tcp, service: -, duration: 0.00002, src_bytes: 0, dst_bytes: 440, conn_state: RSTOS0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 492, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 34296, dst_ip: 192.168.1.152, dst_port: 10502, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 1880, dst_ip: 192.168.1.152, dst_port: 51782, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 47724, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: -, duration: 0.332469, src_bytes: 0, dst_bytes: 0, conn_state: SF, missed_bytes: 0, src_pkts: 4, src_ip_bytes: 180, dst_pkts: 3, dst_ip_bytes: 132, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time: 14:58:34, motion_status: 0, light_status:  off

[Assistant] attack


[User] src_ip: 2405:6e00:10ce:2c00:20c:29ff:feee:e07a, src_port: 40338, dst_ip: 2001:500:2d::d, dst_port: 53, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 76, dst_pkts: 0, dst_ip_bytes: 0, dns_query: (empty), dns_qclass: 1, dns_qtype: 2, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:38:58, motion_status: 0, light_status:  off

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49158, dst_ip: 192.168.1.37, dst_port: 4444, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 200, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2460, MINFLT: 0, MAJFLT: 0, VSTEXT: 281, VSIZE: 609.8, RSIZE: 11696, VGROW: 0, RGROW: 0, MEM: 0, CMD: bamfdaemon

[Assistant] normal


[User] date: 1-Apr-19, time:   21:06:29   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] src_ip: 192.168.1.33, src_port: 42697, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 4470, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0.02, CMD: tcpdump

[Assistant] normal


[User] PID: 3895, RDDSK: 0, WRDSK: 8, WCANCL: 0, DSK: 0.07, CMD: atop, attack: 0

[Assistant] normal


[User] PID: 6450, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 1, Status: 0, EXC: 0, State: S, CPU: 0.02, CMD: atop

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 25, dst_ip: 192.168.1.194, dst_port: 25, proto: tcp, service: -, duration: 0.000303, src_bytes: 0, dst_bytes: 0, conn_state: RSTO, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 80, dst_pkts: 1, dst_ip_bytes: 44, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3729, MINFLT: 217, MAJFLT: 0, VSTEXT: 0, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: <bash>

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:24, FC1_Read_Input_Register: 41133, FC2_Read_Discrete_Value: 56307, FC3_Read_Holding_Register: 48525, FC4_Read_Coil: 9027

[Assistant] normal


[User] PID: 4027, RDDSK: 0, WRDSK: 12, WCANCL: 0, DSK: 0.05, CMD: apache2, attack: 1

[Assistant] attack


[User] date: 28-Apr-19, time:  09:51:22 , FC1_Read_Input_Register: 58513, FC2_Read_Discrete_Value: 51288, FC3_Read_Holding_Register: 36882, FC4_Read_Coil: 62762

[Assistant] attack


[User] date: 25-Apr-19, time:  15:33:42 , door_state: open, sphone_signal: 1

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 52467, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.002433, src_bytes: 54, dst_bytes: 54, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 82, dst_pkts: 1, dst_ip_bytes: 82, dns_query: testphp.vulnweb.com/listproducts.php, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: T, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  08:15:24 , temperature: 33.87687377, pressure: 1.273227209, humidity: 39.80683522

[Assistant] attack


[User] PID: 1488, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0.11, CMD: Xorg

[Assistant] attack


[User] date: 26-Apr-19, time:  00:09:03 , motion_status: 1, light_status:  on

[Assistant] attack


[User] PID: 3197, TRUN: 0, TSLPI: 61, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: firefox

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 41078, dst_ip: 52.198.169.189, dst_port: 443, proto: tcp, service: ssl, duration: 10.931499, src_bytes: 992, dst_bytes: 4961, conn_state: SF, missed_bytes: 0, src_pkts: 13, src_ip_bytes: 1652, dst_pkts: 10, dst_ip_bytes: 5489, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3155, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: gnome-terminal

[Assistant] normal


[User] date: 31-Mar-19, time:    12:41:39   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 45384, dst_ip: 192.168.1.184, dst_port: 443, proto: tcp, service: -, duration: 60.624638, src_bytes: 0, dst_bytes: 0, conn_state: S3, missed_bytes: 0, src_pkts: 3, src_ip_bytes: 164, dst_pkts: 2, dst_ip_bytes: 112, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 25-Apr-19, time:  09:21:54 , fridge_temperature: 3, temp_condition: low

[Assistant] attack


[User] src_ip: 192.168.1.33, src_port: 45887, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1669, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: haveged, attack: 1

[Assistant] attack


[User] date: 27-Apr-19, time:  05:30:21 , temperature: 39.94093311, pressure: 0.350453956, humidity: 14.57841509

[Assistant] attack


[User] date: 31-Mar-19, time: 12:37:05, latitude: 0.017308489, longitude: 10.19801196

[Assistant] normal


[User] PID: 4374, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: atop

[Assistant] normal


[User] date: 25-Apr-19, time: 8:34:26, temperature: 47.66609248, pressure: 2.04803982, humidity: 31.65230354

[Assistant] attack


[User] PID: 3678, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 37, dst_ip: 192.168.1.190, dst_port: 37, proto: tcp, service: -, duration: 0.000196, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 54604, dst_ip: 192.168.1.152, dst_port: 80, proto: tcp, service: http, duration: 0.08454, src_bytes: 215, dst_bytes: 3440, conn_state: SF, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 535, dst_pkts: 7, dst_ip_bytes: 3812, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2489, MINFLT: 0, MAJFLT: 0, VSTEXT: 78, VSIZE: 122, RSIZE: 2136, VGROW: 0, RGROW: 0, MEM: 0, CMD: at-spi2-regist

[Assistant] normal


[User] date: 2-Apr-19, time:  00:20:42 , current_temperature: 25.77837029, thermostat_status: 1

[Assistant] normal


[User] src_ip: 192.168.1.195, src_port: 1263, dst_ip: 192.168.1.195, dst_port: 1263, proto: tcp, service: -, duration: 0.205002, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 45866, dst_ip: 52.28.231.150, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.180, src_port: 41705, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.010587, src_bytes: 41, dst_bytes: 89, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 69, dst_pkts: 1, dst_ip_bytes: 117, dns_query: elasticsearch.mydns.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] Processor(_Total) DPC Rate: 46, Processor(_Total) pct_ Idle Time: 65, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.208333333, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 1.979166667, Processor(_Total) pct_ C1 Time: 66.66666667, Processor(_Total) pct_ Processor Time: 35, Processor(_Total) C1 Transitions sec: 3616.490013, Processor(_Total) pct_ DPC Time: 0.625, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 33.02083333, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 3757.54979, Processor(_Total) Interrupts sec: 5248.81028, Process(_Total) Pool Paged Bytes: 7904776, Process(_Total) IO Read Operations sec: 2.133229132, Process(_Total) Working Set - Private: 802496512, Process(_Total) Working Set Peak: 2012385280, Process(_Total) IO Write Operations sec: 1.599921849, Process(_Total) Page File Bytes: 2038140928, Process(_Total) pct_ User Time: 1.979166667, Process(_Total) Virtual Bytes Peak: 8081039360, Process(_Total) Page File Bytes Peak: 2690347008, Process(_Total) IO Other Bytes sec: 6111.834791, Process(_Total) Private Bytes: 2038140928, Process(_Total) IO Write Bytes sec: 1354.867153, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6750371840, Process(_Total) pct_ Processor Time: 99.16666667, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1055624, Process(_Total) Working Set: 858394624, Process(_Total) Page Faults sec: 5484.265445, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 312.5847313, Process(_Total) IO Data Operations sec: 3.733150981, Process(_Total) Thread Count: 560, Process(_Total) pct_ Privileged Time: 97.1875, Process(_Total) IO Data Bytes sec: 1594.322123, Process(_Total) IO Read Bytes sec: 239.4549701, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13764, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 86.52910667, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 79.596112, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 166.1252187, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 1.133277976, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 1.133277976, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 2.266555953, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 1.133277976, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 1.133277976, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 92733440, Memory Free & Zero Page List Bytes: 1048576, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 696320, Memory Available Bytes: 4812800, Memory Commit Limit: 2918703104, Memory Transition Pages RePurposed sec: 6525.147935, Memory Pages Output sec: 8885.56597, Memory Page Reads sec: 3237.375198, Memory Demand Zero Faults sec: 595.9042254, Memory Available KBytes: 4700, Memory Pages sec: 16950.77201, Memory Cache Bytes: 438272, Memory Pool Nonpaged Bytes: 53686272, Memory Page Faults sec: 5715.454152, Memory Transition Faults sec: 1938.50531, Memory System Cache Resident Bytes: 438272, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 921.8883022, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 348160, Memory System Driver Resident Bytes: 1159168, Memory Standby Cache Normal Priority Bytes: 3416064, Memory Pool Paged Allocs: 59162, Memory Pool Nonpaged Allocs: 52048, Memory pct_ Committed Bytes In Use: 81.70898742, Memory Free System Page Table Entries: 33562140, Memory Available MBytes: 4, Memory Modified Page List Bytes: 65536, Memory Cache Faults sec: 0.399980462, Memory Committed Bytes: 2384842752, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 8065.206042, Memory Pool Paged Resident Bytes: 10407936, Memory Write Copies sec: 0

[Assistant] normal


[User] date: 28-Apr-19, time:  05:09:31 , motion_status: 0, light_status:  off

[Assistant] attack


[User] PID: 2533, MINFLT: 9, MAJFLT: 0, VSTEXT: 589, VSIZE: 644.4, RSIZE: 19024, VGROW: 0, RGROW: 0, MEM: 0.01, CMD: hud-service

[Assistant] normal


[User] Processor_DPC_Rate: 1, Processor_pct_ Idle_Time: 82.82178524, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.312993622, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 7.590095339, Processor_pct_ C1_Time: 82.82178524, Processor_pct_ Processor_Time: 14.08325069, Processor_C1_ransitions_sec: 442.6999174, Processor_pct_ DPC_Time: 0.70423565, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 6.416369256, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 304.9821829, Processor_Interrupts_sec: 760.3020528, Process_Pool_Paged Bytes: 32989112, Process_IO Read_Operations_sec: 9.314726769, Process_Working_Set_ Private: 837341184, Process_Working_Set_Peak: 6571761664, Process_IO_Write Operations_sec: 14.9235945, Process_Page_File Bytes: 2302926848, Process_pct_ User_Time: 15.18019068, Process_Virtual_Bytes Peak: 2.63E+14, Process_Page_File Bytes Peak: 4128378880, Process_IO_Other_Bytes_sec: 20619.6, Process_Private_Bytes: 2302926848, Process_IO_Write_Bytes_sec: 163211.2402, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 2.63E+14, Process_pct_ Processor_Time: 197.9684661, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2978700, Process_Working Set: 3293925376, Process_Page Faults_sec: 1633.081935, Process_ID Process: 0, Process_IO Other Operations_sec: 314.5973848, Process_IO Data Operations_sec: 24.23832127, Process_Thread Count: 1473, Process_pct_ Privileged_Time: 182.7882754, Process_IO Data Bytes_sec: 165586.5957, Process_IO Read Bytes_sec: 2375.355485, Process_Priority Base: 0, Process_Handle Count: 58993, Network_I(Intel R _82574L_GNC)TCP_APS: 8978, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 24493.72507, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 2242.745826, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 26736.4709, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 19.33056201, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 327.2173372, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 346.5478992, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 9, Network_I(Intel R _82574L_GNC) Packets Sent sec: 19.33056201, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 327.2173372, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 149643264, Memory Free & Zero Page List Bytes: 1602654208, Memory Cache Bytes Peak: 243453952, Memory System Code Resident Bytes: 0, Memory Available Bytes: 2025070592, Memory Commit Limit: 5770170368, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 881.2933424, Memory Available KBytes: 1977608, Memory Pages sec: 0, Memory Cache Bytes: 132591616, Memory Pool Nonpaged Bytes: 94404608, Memory Page Faults sec: 1634.383994, Memory Transition Faults sec: 791.0506669, Memory System Cache Resident Bytes: 132591616, Memory Long-Term Average Standby Cache Lifetime (s): 1174, Memory Standby Cache Reserve Bytes: 1261568, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 168292352, Memory System Driver Resident Bytes: 10010624, Memory Standby Cache Normal Priority Bytes: 252862464, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 51.91352797, Memory Free System Page Table Entries: 12263839, Memory Available MBytes: 1931, Memory Modified Page List Bytes: 13246464, Memory Cache Faults sec: 0, Memory Committed Bytes: 2995499008, Memory System Driver Total Bytes: 19443712, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 143073280, Memory Write Copies sec: 11.91884393, LogicalDisk(_Total) Avg  Disk Bytes Write: 34160.64, LogicalDisk(_Total) pct_ Idle Time: 99.78604758, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 83.59938044, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 5.007917618, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 171097, LogicalDisk(_Total) Avg  Disk sec Write: 0.001279064, LogicalDisk(_Total) Disk Bytes sec: 171073.6709, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.213513733, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.006405422, LogicalDisk(_Total) Avg  Disk Queue Length: 0.006405422, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 171073.6709, LogicalDisk(_Total) Disk Transfers sec: 5.007917618, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 34160.64, LogicalDisk(_Total) pct_ Disk Write Time: 0.213514734, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.001279064

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 53921, dst_ip: 192.168.1.152, dst_port: 512, proto: tcp, service: -, duration: 0.027151, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2460, MINFLT: 1, MAJFLT: 0, VSTEXT: 281, VSIZE: 607.4, RSIZE: 15512, VGROW: 0, RGROW: 0, MEM: 0, CMD: bamfdaemon

[Assistant] normal


[User] date: 1-Apr-19, time:  19:42:52 , current_temperature: 28.38107943, thermostat_status: 1

[Assistant] normal


[User] PID: 3678, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: atop

[Assistant] normal


[User] PID: 2821, TRUN: 0, TSLPI: 5, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: 0, EXC: 0, State: S, CPU: 0.05, CMD: compiz

[Assistant] attack


[User] PID: 1483, TRUN: 0, TSLPI: 17, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: -, EXC: 0, State: S, CPU: 0, CMD: mysqld

[Assistant] normal


[User] PID: 2576, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: 0, EXC: 0, State: S, CPU: 0, CMD: upstart-dbus-b

[Assistant] attack


[User] date: 31-Mar-19, time:    12:44:42   , fridge_temperature: 1.15, temp_condition: low

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 56029, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000031, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 54325, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.000004, src_bytes: 52, dst_bytes: 52, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 108, dst_pkts: 2, dst_ip_bytes: 108, dns_query: wpad.hub, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: T, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3739, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: worer/0:1, attack: 0

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:50, temperature: 28.09949242, pressure: 1.616423223, humidity: 95.17098723

[Assistant] normal


[User] src_ip: fe80::76:ad3e:1329:a7fd, src_port: 5353, dst_ip: ff02::fb, dst_port: 5353, proto: udp, service: dns, duration: 13.081001, src_bytes: 516, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 804, dst_pkts: 0, dst_ip_bytes: 0, dns_query: _sleep-proxy._udp.local, dns_qclass: 32769, dns_qtype: 12, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 75.09237401, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 21.48449402, Processor_pct_ C1_Time: 75.09237401, Processor_pct_ Processor_Time: 23.28082498, Processor_C1_ransitions_sec: 485.5012186, Processor_pct_ DPC_Time: 0, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 1.796884955, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 37.90009513, Processor_Interrupts_sec: 882.3022146, Process_Pool_Paged Bytes: 22016112, Process_IO Read_Operations_sec: 5.800014558, Process_Working_Set_ Private: 1699561472, Process_Working_Set_Peak: 5935063040, Process_IO_Write Operations_sec: 1.300003263, Process_Page_File Bytes: 3211771904, Process_pct_ User_Time: 42.96898805, Process_Virtual_Bytes Peak: 1.52E+14, Process_Page_File Bytes Peak: 4254121984, Process_IO_Other_Bytes_sec: 5578.614002, Process_Private_Bytes: 3211771904, Process_IO_Write_Bytes_sec: 6710.016842, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.52E+14, Process_pct_ Processor_Time: 200.001108, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2409192, Process_Working Set: 1840136192, Process_Page Faults_sec: 917.4023027, Process_ID Process: 0, Process_IO Other Operations_sec: 103.1002588, Process_IO Data Operations_sec: 7.100017821, Process_Thread Count: 979, Process_pct_ Privileged_Time: 157.03212, Process_IO Data Bytes_sec: 7881.019781, Process_IO Read Bytes_sec: 1171.002939, Process_Priority Base: 0, Process_Handle Count: 38393, Network_I(Intel R _82574L_GNC)TCP_APS: 5260, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 5165.512965, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 341.0008559, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5506.513821, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 6.100015311, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 11.90002987, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 18.00004518, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 2, Network_I(Intel R _82574L_GNC) Packets Sent sec: 6.100015311, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 11.90002987, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 103854080, Memory Free & Zero Page List Bytes: 5906432, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 601698304, Memory Commit Limit: 8473145344, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 35.20008835, Memory Page Reads sec: 0.500001255, Memory Demand Zero Faults sec: 937.1023521, Memory Available KBytes: 587596, Memory Pages sec: 41.10010316, Memory Cache Bytes: 1642496, Memory Pool Nonpaged Bytes: 94760960, Memory Page Faults sec: 922.9023165, Memory Transition Faults sec: 129.0003238, Memory System Cache Resident Bytes: 1642496, Memory Long-Term Average Standby Cache Lifetime (s): 1387, Memory Standby Cache Reserve Bytes: 210550784, Memory Page Writes sec: 0.800002008, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 198848512, Memory System Driver Resident Bytes: 1.76E+13, Memory Standby Cache Normal Priority Bytes: 186392576, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 47.76879869, Memory Free System Page Table Entries: 12210291, Memory Available MBytes: 573, Memory Modified Page List Bytes: 524288, Memory Cache Faults sec: 1.800004518, Memory Committed Bytes: 4047519744, Memory System Driver Total Bytes: 18202624, Memory Pages Input sec: 5.900014809, Memory Pool Paged Resident Bytes: 32075776, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 87608.88889, LogicalDisk(_Total) pct_ Idle Time: 99.94387369, LogicalDisk(_Total) Disk Reads sec: 0.500001255, LogicalDisk(_Total) pct_ Free Space: 81.30389958, LogicalDisk(_Total) Disk Read Bytes sec: 24166.46066, LogicalDisk(_Total) Avg  Disk sec Read: 0.00143804, LogicalDisk(_Total) Disk Writes sec: 1.800004518, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 166399, LogicalDisk(_Total) Avg  Disk sec Write: 0.0006369, LogicalDisk(_Total) Disk Bytes sec: 181862.8565, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.000719024, LogicalDisk(_Total) pct_ Disk Time: 0.062182344, LogicalDisk(_Total) Avg  Disk Bytes Read: 48332.8, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.001146426, LogicalDisk(_Total) Avg  Disk Queue Length: 0.00186545, LogicalDisk(_Total) pct_ Disk Read Time: 0.023968133, LogicalDisk(_Total) Disk Write Bytes sec: 157696.3958, LogicalDisk(_Total) Disk Transfers sec: 2.300005773, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 79070.6087, LogicalDisk(_Total) pct_ Disk Write Time: 0.038214212, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000811061

[Assistant] normal


[User] date: 28-Apr-19, time: 4:51:31, temperature: 33.38841709, pressure: -0.922670242, humidity: 1.366047021

[Assistant] attack


[User] PID: 1851, MINFLT: 0, MAJFLT: 0, VSTEXT: 36, VSIZE: 159.8, RSIZE: 4392, VGROW: 0, RGROW: 0, MEM: 0, CMD: vmtoolsd

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 45712, dst_ip: 172.217.25.161, dst_port: 443, proto: tcp, service: ssl, duration: 1.321224, src_bytes: 535, dst_bytes: 3108, conn_state: SF, missed_bytes: 0, src_pkts: 14, src_ip_bytes: 1271, dst_pkts: 11, dst_ip_bytes: 3688, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2821, TRUN: 0, TSLPI: 5, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: 0, EXC: 0, State: S, CPU: 0.01, CMD: compiz

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 54442, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000031, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 1-Apr-19, time:  20:20:13 , current_temperature: 27.88793315, thermostat_status: 1

[Assistant] normal


[User] PID: 4378, MINFLT: 1, MAJFLT: 0, VSTEXT: 0, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: <atop>

[Assistant] normal


[User] date: 31-Mar-19, time:    12:41:58   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] PID: 2864, MINFLT: 0, MAJFLT: 0, VSTEXT: 39, VSIZE: 58160, RSIZE: 1424, VGROW: 0, RGROW: 28, MEM: 0, CMD: gconfd-2

[Assistant] normal


[User] date: 2-Apr-19, time:    04:07:10   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 49126, dst_ip: 192.168.1.152, dst_port: 80, proto: tcp, service: http, duration: 0.103487, src_bytes: 327, dst_bytes: 3440, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 595, dst_pkts: 7, dst_ip_bytes: 3812, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2540, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: 0, EXC: 0, State: S, CPU: 0.02, CMD: unity-panel-se

[Assistant] attack


[User] src_ip: 192.168.1.37, src_port: 45455, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 60, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3058, MINFLT: 0, MAJFLT: 0, VSTEXT: 280, VSIZE: 710.1, RSIZE: 22236, VGROW: 0, RGROW: 0, MEM: 0.01, CMD: gnome-terminal

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 39188, dst_ip: 172.217.167.68, dst_port: 443, proto: tcp, service: ssl, duration: 184.354579, src_bytes: 6986, dst_bytes: 4908, conn_state: RSTR, missed_bytes: 0, src_pkts: 45, src_ip_bytes: 9334, dst_pkts: 57, dst_ip_bytes: 7868, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 34230, dst_ip: 18.194.169.124, dst_port: 80, proto: tcp, service: -, duration: 3.011572, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 3, src_ip_bytes: 180, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 73.71274206, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 23.12551986, Processor_pct_ C1_Time: 73.71274206, Processor_pct_ Processor_Time: 25.31082099, Processor_C1_ransitions_sec: 137.6029323, Processor_pct_ DPC_Time: 0.234380269, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 2.187549176, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 31.00066062, Processor_Interrupts_sec: 613.3130697, Process_Pool_Paged Bytes: 22008112, Process_IO Read_Operations_sec: 5.800123601, Process_Working_Set_ Private: 1804988416, Process_Working_Set_Peak: 5713768448, Process_IO_Write Operations_sec: 1.700036228, Process_Page_File Bytes: 2961809408, Process_pct_ User_Time: 46.25103972, Process_Virtual_Bytes Peak: 1.52E+14, Process_Page_File Bytes Peak: 3989598208, Process_IO_Other_Bytes_sec: 3165.66746, Process_Private_Bytes: 2961809408, Process_IO_Write_Bytes_sec: 6759.544046, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.52E+14, Process_pct_ Processor_Time: 199.5357356, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2339824, Process_Working Set: 2291548160, Process_Page Faults_sec: 769.8164048, Process_ID Process: 0, Process_IO Other Operations_sec: 77.10164304, Process_IO Data Operations_sec: 7.500159828, Process_Thread Count: 979, Process_pct_ Privileged_Time: 153.2846958, Process_IO Data Bytes_sec: 7930.569, Process_IO Read Bytes_sec: 1171.024955, Process_Priority Base: 0, Process_Handle Count: 38421, Network_I(Intel R _82574L_GNC)TCP_APS: 5280, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4943.20534, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 314.0066915, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5257.212031, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 5.800123601, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 8.800187532, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 14.60031113, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 2, Network_I(Intel R _82574L_GNC) Packets Sent sec: 5.800123601, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 8.800187532, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 104103936, Memory Free & Zero Page List Bytes: 9887744, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 322564096, Memory Commit Limit: 8473149440, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0.200004262, Memory Demand Zero Faults sec: 1014.321615, Memory Available KBytes: 315004, Memory Pages sec: 3.200068193, Memory Cache Bytes: 12566528, Memory Pool Nonpaged Bytes: 90505216, Memory Page Faults sec: 771.6164431, Memory Transition Faults sec: 8.000170484, Memory System Cache Resident Bytes: 12566528, Memory Long-Term Average Standby Cache Lifetime (s): 52, Memory Standby Cache Reserve Bytes: 29290496, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 163168256, Memory System Driver Resident Bytes: 4173824, Memory Standby Cache Normal Priority Bytes: 120217600, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 44.81398406, Memory Free System Page Table Entries: 12210455, Memory Available MBytes: 307, Memory Modified Page List Bytes: 17784832, Memory Cache Faults sec: 1.800038359, Memory Committed Bytes: 3797155840, Memory System Driver Total Bytes: 18202624, Memory Pages Input sec: 3.200068193, Memory Pool Paged Resident Bytes: 57487360, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 20480, LogicalDisk(_Total) pct_ Idle Time: 99.98017455, LogicalDisk(_Total) Disk Reads sec: 0.200004262, LogicalDisk(_Total) pct_ Free Space: 81.30927427, LogicalDisk(_Total) Disk Read Bytes sec: 13107.47932, LogicalDisk(_Total) Avg  Disk sec Read: 0.0010927, LogicalDisk(_Total) Disk Writes sec: 0.500010655, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 166410, LogicalDisk(_Total) Avg  Disk sec Write: 0.00075788, LogicalDisk(_Total) Disk Bytes sec: 23347.69754, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.000218545, LogicalDisk(_Total) pct_ Disk Time: 0.019916448, LogicalDisk(_Total) Avg  Disk Bytes Read: 65536, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000378949, LogicalDisk(_Total) Avg  Disk Queue Length: 0.000597493, LogicalDisk(_Total) pct_ Disk Read Time: 0.007285164, LogicalDisk(_Total) Disk Write Bytes sec: 10240.21822, LogicalDisk(_Total) Disk Transfers sec: 0.700014917, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 33353.14286, LogicalDisk(_Total) pct_ Disk Write Time: 0.012631284, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000853543

[Assistant] normal


[User] PID: 2809, MINFLT: 0, MAJFLT: 0, VSTEXT: 36, VSIZE: 381, RSIZE: 2812, VGROW: 0, RGROW: 0, MEM: 0, CMD: vmtoolsd

[Assistant] normal


[User] date: 27-Apr-19, time:  05:10:45 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:13, temperature: 27.67208295, pressure: 0.172699477, humidity: 61.55439035

[Assistant] normal


[User] date: 28-Apr-19, time:  05:11:29 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:20, motion_status: 1, light_status:  on

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 38580, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.019681, src_bytes: 152, dst_bytes: 3558, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 420, dst_pkts: 7, dst_ip_bytes: 3930, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1872, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vmtoolsd, attack: 1

[Assistant] attack


[User] PID: 4373, MINFLT: 2065, MAJFLT: 0, VSTEXT: 148, VSIZE: 17644, RSIZE: 2412, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] date: 31-Mar-19, time: 12:42:05, motion_status: 1, light_status:  on

[Assistant] normal


[User] PID: 3257, TRUN: 0, TSLPI: 22, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0.11, CMD: Web-Content

[Assistant] normal


[User] date: 31-Mar-19, time:    12:43:57   , door_state: closed, sphone_signal: false

[Assistant] normal