[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 93.06247493, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 3.671862332, Processor_pct_ C1_Time: 93.06247493, Processor_pct_ Processor_Time: 4.765953557, Processor_C1_ransitions_sec: 323.8993684, Processor_pct_ DPC_Time: 0, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 1.093746227, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 23.09995496, Processor_Interrupts_sec: 416.899187, Process_Pool_Paged Bytes: 30592304, Process_IO Read_Operations_sec: 9.59998128, Process_Working_Set_ Private: 2230681600, Process_Working_Set_Peak: 6194876416, Process_IO_Write Operations_sec: 9.499981475, Process_Page_File Bytes: 3750428672, Process_pct_ User_Time: 7.343724664, Process_Virtual_Bytes Peak: 2.49E+14, Process_Page_File Bytes Peak: 4605820928, Process_IO_Other_Bytes_sec: 4405.991408, Process_Private_Bytes: 3750428672, Process_IO_Write_Bytes_sec: 3961.992274, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 2.49E+14, Process_pct_ Processor_Time: 199.99931, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2938360, Process_Working Set: 3452514304, Process_Page Faults_sec: 1364.19734, Process_ID Process: 0, Process_IO Other Operations_sec: 102.3998003, Process_IO Data Operations_sec: 19.09996276, Process_Thread Count: 1376, Process_pct_ Privileged_Time: 192.6555853, Process_IO Data Bytes_sec: 6784.78677, Process_IO Read Bytes_sec: 2822.794496, Process_Priority Base: 0, Process_Handle Count: 51434, Network_I(Intel R _82574L_GNC)TCP_APS: 9902, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 2689.694755, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 149.9997075, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 2839.694463, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 2.79999454, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 6.39998752, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 9.19998206, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 1, Network_I(Intel R _82574L_GNC) Packets Sent sec: 2.79999454, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 6.39998752, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 145653760, Memory Free & Zero Page List Bytes: 508964864, Memory Cache Bytes Peak: 199274496, Memory System Code Resident Bytes: 0, Memory Available Bytes: 1022386176, Memory Commit Limit: 5770170368, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 853.4983357, Memory Available KBytes: 998424, Memory Pages sec: 0, Memory Cache Bytes: 20160512, Memory Pool Nonpaged Bytes: 104243200, Memory Page Faults sec: 1364.497339, Memory Transition Faults sec: 545.5989361, Memory System Cache Resident Bytes: 20160512, Memory Long-Term Average Standby Cache Lifetime (s): 14400, Memory Standby Cache Reserve Bytes: 102191104, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 244113408, Memory System Driver Resident Bytes: 5042176, Memory Standby Cache Normal Priority Bytes: 167116800, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 79.04627774, Memory Free System Page Table Entries: 12263394, Memory Available MBytes: 975, Memory Modified Page List Bytes: 12652544, Memory Cache Faults sec: 0, Memory Committed Bytes: 4561104896, Memory System Driver Total Bytes: 18079744, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 83304448, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 12288, LogicalDisk(_Total) pct_ Idle Time: 99.99689701, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 81.68110504, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 0.39999922, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 167171, LogicalDisk(_Total) Avg  Disk sec Write: 0.000240025, LogicalDisk(_Total) Disk Bytes sec: 4915.190415, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.003199989, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 9.60E-05, LogicalDisk(_Total) Avg  Disk Queue Length: 9.60E-05, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 4915.190415, LogicalDisk(_Total) Disk Transfers sec: 0.39999922, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 12288, LogicalDisk(_Total) pct_ Disk Write Time: 0.003199989, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000240025

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 41511, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.013419, src_bytes: 94, dst_bytes: 218, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 150, dst_pkts: 2, dst_ip_bytes: 274, dns_query: pagead2.googlesyndication.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1851, MINFLT: 7, MAJFLT: 0, VSTEXT: 36, VSIZE: 159.8, RSIZE: 1892, VGROW: 0, RGROW: 0, MEM: 0, CMD: vmtoolsd

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 11, dst_ip: 74.125.171.136, dst_port: 0, proto: icmp, service: -, duration: 336.515936, src_bytes: 85188, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 280, src_ip_bytes: 93028, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:51, FC1_Read_Input_Register: 14973, FC2_Read_Discrete_Value: 33979, FC3_Read_Holding_Register: 21790, FC4_Read_Coil: 54111

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 56470, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: -, duration: 0.000338, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:44, FC1_Read_Input_Register: 9156, FC2_Read_Discrete_Value: 29220, FC3_Read_Holding_Register: 23993, FC4_Read_Coil: 43897

[Assistant] normal


[User] date: 31-Mar-19, time: 12:42:33, FC1_Read_Input_Register: 51930, FC2_Read_Discrete_Value: 25443, FC3_Read_Holding_Register: 26641, FC4_Read_Coil: 44687

[Assistant] normal


[User] PID: 3895, RDDSK: 0, WRDSK: 16, WCANCL: 0, DSK: 0.25, CMD: atop, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 39056, dst_ip: 52.62.168.95, dst_port: 443, proto: tcp, service: ssl, duration: 180.792594, src_bytes: 884, dst_bytes: 4373, conn_state: SF, missed_bytes: 0, src_pkts: 29, src_ip_bytes: 2400, dst_pkts: 19, dst_ip_bytes: 5369, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 43192, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.00164, src_bytes: 0, dst_bytes: 298, conn_state: SHR, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 2, dst_ip_bytes: 354, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 1321, dst_ip: 192.168.1.152, dst_port: 1321, proto: tcp, service: -, duration: 0.265912, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:59, temperature: 25.45711854, pressure: 0.695417473, humidity: 31.97941126

[Assistant] normal


[User] PID: 2784, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: goa-daemon

[Assistant] normal


[User] src_ip: 192.168.1.180, src_port: 52759, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000378, src_bytes: 41, dst_bytes: 89, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 69, dst_pkts: 1, dst_ip_bytes: 117, dns_query: elasticsearch.mydns.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 4324, MINFLT: 1398, MAJFLT: 0, VSTEXT: 148, VSIZE: 18172, RSIZE: 2684, VGROW: 4, RGROW: 0, MEM: 0, CMD: atop

[Assistant] attack


[User] src_ip: 192.168.1.250, src_port: 5353, dst_ip: 224.0.0.251, dst_port: 5353, proto: udp, service: dns, duration: 3.958229, src_bytes: 336, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 3, src_ip_bytes: 420, dst_pkts: 0, dst_ip_bytes: 0, dns_query: _sleep-proxy._udp.local, dns_qclass: 32769, dns_qtype: 12, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:58, temperature: 47.29720683, pressure: 0.740123995, humidity: 48.81181729

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 58590, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 0.17975, src_bytes: 238, dst_bytes: 1951, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 458, dst_pkts: 5, dst_ip_bytes: 2163, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1401, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: 0, EXC: 0, State: S, CPU: 0, CMD: irqbalance

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 62947, dst_ip: 192.168.1.186, dst_port: 5633, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2950, TRUN: 0, TSLPI: 5, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: nautilus

[Assistant] attack


[User] date: 1-Apr-19, time:  19:24:31 , current_temperature: 31.3231979, thermostat_status: 1

[Assistant] normal


[User] date: 1-Apr-19, time:  19:01:38 , current_temperature: 27.1562171, thermostat_status: 1

[Assistant] normal


[User] PID: 2809, MINFLT: 0, MAJFLT: 0, VSTEXT: 36, VSIZE: 381, RSIZE: 3724, VGROW: 0, RGROW: 0, MEM: 0, CMD: vmtoolsd

[Assistant] normal


[User] PID: 2618, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: unity-panel-se, attack: 0

[Assistant] normal


[User] PID: 1134, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vsftpd, attack: 0

[Assistant] normal


[User] date: 2-Apr-19, time:  04:06:13 , current_temperature: 30.84710551, thermostat_status: 1

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 49965, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.062344, src_bytes: 82, dst_bytes: 218, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 138, dst_pkts: 2, dst_ip_bytes: 274, dns_query: stats.g.doubleclick.net, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 4372, MINFLT: 2077, MAJFLT: 0, VSTEXT: 148, VSIZE: 17644, RSIZE: 2440, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.180, src_port: 41930, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 5.371925, src_bytes: 31, dst_bytes: 106, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 59, dst_pkts: 1, dst_ip_bytes: 134, dns_query: elasticsearch, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 28-Apr-19, time:  08:29:34 , temperature: 30.61335932, pressure: -0.30359004, humidity: 73.67069678

[Assistant] attack


[User] date: 1-Apr-19, time:  17:12:19 , latitude: 74.6480169, longitude: 82.71634836

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 61850, dst_ip: 239.255.255.250, dst_port: 1900, proto: udp, service: -, duration: 5.9956, src_bytes: 1488, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 12, src_ip_bytes: 1824, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 45248, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.021739, src_bytes: 35, dst_bytes: 83, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 63, dst_pkts: 1, dst_ip_bytes: 111, dns_query: ocsp.digicert.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:    04:05:06   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:02, latitude: 0.478862525, longitude: 10.42918153

[Assistant] normal


[User] PID: 3896, RDDSK: 0, WRDSK: 24, WCANCL: 0, DSK: 0.22, CMD: atop, attack: 0

[Assistant] normal


[User] date: 25-Apr-19, time:  19:15:10 , latitude: 139.5415977, longitude: 155.6034952

[Assistant] attack


[User] Processor(_Total) DPC Rate: 66, Processor(_Total) pct_ Idle Time: 76.04166667, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.104166667, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 0.833333333, Processor(_Total) pct_ C1 Time: 73.33333333, Processor(_Total) pct_ Processor Time: 23.95833333, Processor(_Total) C1 Transitions sec: 3736.161828, Processor(_Total) pct_ DPC Time: 0.3125, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 23.125, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 3657.561228, Processor(_Total) Interrupts sec: 4933.704294, Process(_Total) Pool Paged Bytes: 8008960, Process(_Total) IO Read Operations sec: 8.000061014, Process(_Total) Working Set - Private: 755757056, Process(_Total) Working Set Peak: 2072072192, Process(_Total) IO Write Operations sec: 1.666679378, Process(_Total) Page File Bytes: 1911644160, Process(_Total) pct_ User Time: 0.833333333, Process(_Total) Virtual Bytes Peak: 8087773184, Process(_Total) Page File Bytes Peak: 2307084288, Process(_Total) IO Other Bytes sec: 8586.59882, Process(_Total) Private Bytes: 1911644160, Process(_Total) IO Write Bytes sec: 915.2736472, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6902018048, Process(_Total) pct_ Processor Time: 99.58333333, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1045880, Process(_Total) Working Set: 810635264, Process(_Total) Page Faults sec: 5233.506581, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 392.2029912, Process(_Total) IO Data Operations sec: 9.666740392, Process(_Total) Thread Count: 558, Process(_Total) pct_ Privileged Time: 98.75, Process(_Total) IO Data Bytes sec: 1267.07633, Process(_Total) IO Read Bytes sec: 351.8026831, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13987, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 588.8044906, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 49.86704699, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 638.6715376, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 0.466670226, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 3.466693106, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 3.933363332, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 0.466670226, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 3.466693106, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 97296384, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 80883712, Memory System Code Resident Bytes: 716800, Memory Available Bytes: 4431872, Memory Commit Limit: 2550685696, Memory Transition Pages RePurposed sec: 5330.773989, Memory Pages Output sec: 7218.588387, Memory Page Reads sec: 2703.553952, Memory Demand Zero Faults sec: 335.2692237, Memory Available KBytes: 4328, Memory Pages sec: 13711.10457, Memory Cache Bytes: 487424, Memory Pool Nonpaged Bytes: 56889344, Memory Page Faults sec: 5447.441546, Memory Transition Faults sec: 2408.951706, Memory System Cache Resident Bytes: 487424, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 1026.674497, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 548864, Memory System Driver Resident Bytes: 1368064, Memory Standby Cache Normal Priority Bytes: 3883008, Memory Pool Paged Allocs: 61823, Memory Pool Nonpaged Allocs: 53269, Memory pct_ Committed Bytes In Use: 89.05666377, Memory Free System Page Table Entries: 33563833, Memory Available MBytes: 4, Memory Modified Page List Bytes: 65536, Memory Cache Faults sec: 0.866673276, Memory Committed Bytes: 2271555584, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 6492.516183, Memory Pool Paged Resident Bytes: 11096064, Memory Write Copies sec: 0

[Assistant] normal


[User] PID: 2882, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: 0, EXC: 0, State: S, CPU: 0, CMD: vmtoolsd

[Assistant] attack


[User] PID: 14875, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: worer/0:0, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 45624, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000048, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 3293, MINFLT: 1909, MAJFLT: 0, VSTEXT: 148, VSIZE: 17624, RSIZE: 2372, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 41510, dst_ip: 172.217.25.35, dst_port: 443, proto: tcp, service: ssl, duration: 0.200682, src_bytes: 527, dst_bytes: 3801, conn_state: SF, missed_bytes: 0, src_pkts: 15, src_ip_bytes: 1315, dst_pkts: 12, dst_ip_bytes: 4433, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1134, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vsftpd, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.180, src_port: 45523, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000631, src_bytes: 31, dst_bytes: 106, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 59, dst_pkts: 1, dst_ip_bytes: 134, dns_query: elasticsearch, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:48, temperature: 28.01431193, pressure: 0.220063885, humidity: 25.80485707

[Assistant] normal


[User] PID: 4450, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: 0, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] date: 26-Apr-19, time:  14:58:38 , temperature: 40.06505202, pressure: 2.365207841, humidity: 18.80128292

[Assistant] attack


[User] PID: 5849, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] date: 1-Apr-19, time:  23:50:30 , current_temperature: 30.34033385, thermostat_status: 1

[Assistant] normal


[User] PID: 3678, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: atop

[Assistant] normal


[User] PID: 3031, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] attack


[User] date: 1-Apr-19, time:  15:18:09 , latitude: 12.6677037, longitude: 22.34313959

[Assistant] normal


[User] date: 26-Apr-19, time:  17:13:31 , motion_status: 0, light_status:  off

[Assistant] attack


[User] PID: 5877, TRUN: 0, TSLPI: 0, TSLPU: 0, POLI: 0, NICE: 0, PRI: 0, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: E, CPU: 0, CMD: <apache2>

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 50047, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.000125, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1442, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: Xorg

[Assistant] normal


[User] date: 2-Apr-19, time:  04:06:32 , motion_status: 0, light_status:  off

[Assistant] normal


[User] PID: 3800, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 5, Status: -, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] PID: 1400, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: irqbalance, attack: 1

[Assistant] attack


[User] date: 2-Apr-19, time:    04:05:24   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:55, current_temperature: 27.35114861, thermostat_status: 1

[Assistant] normal


[User] Processor_DPC_Rate: 2, Processor_pct_ Idle_Time: 64.76966796, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.391058946, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 12.82673344, Processor_pct_ C1_Time: 64.76966796, Processor_pct_ Processor_Time: 33.83282627, Processor_C1_ransitions_sec: 306.3195791, Processor_pct_ DPC_Time: 1.720659364, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 20.96075953, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 273.6961936, Processor_Interrupts_sec: 1041.046253, Process_Pool_Paged Bytes: 27962408, Process_IO Read_Operations_sec: 53.43830618, Process_Working_Set_ Private: 876433408, Process_Working_Set_Peak: 4172845056, Process_IO_Write Operations_sec: 46.2331413, Process_Page_File Bytes: 2261094400, Process_pct_ User_Time: 25.65346688, Process_Virtual_Bytes Peak: 2.56E+14, Process_Page_File Bytes Peak: 2940534784, Process_IO_Other_Bytes_sec: 75678.14837, Process_Private_Bytes: 2261094400, Process_IO_Write_Bytes_sec: 32185.1713, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 2.56E+14, Process_pct_ Processor_Time: 195.8423203, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2654592, Process_Working Set: 2541555712, Process_Page Faults_sec: 1812.899541, Process_ID Process: 0, Process_IO Other Operations_sec: 3453.475555, Process_IO Data Operations_sec: 99.67144748, Process_Thread Count: 1451, Process_pct_ Privileged_Time: 170.1888535, Process_IO Data Bytes_sec: 43355.17829, Process_IO Read Bytes_sec: 11170.007, Process_Priority Base: 0, Process_Handle Count: 51089, Network_I(Intel R _82574L_GNC)TCP_APS: 8401, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 12828.39578, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 34825.66408, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 47654.05986, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 120.4863682, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 137.9989218, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 258.48529, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 7, Network_I(Intel R _82574L_GNC) Packets Sent sec: 120.4863682, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 137.9989218, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 189112320, Memory Free & Zero Page List Bytes: 1146732544, Memory Cache Bytes Peak: 73678848, Memory System Code Resident Bytes: 0, Memory Available Bytes: 1570762752, Memory Commit Limit: 6038605824, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 1.501076016, Memory Demand Zero Faults sec: 1048.851848, Memory Available KBytes: 1533948, Memory Pages sec: 2.101506423, Memory Cache Bytes: 63774720, Memory Pool Nonpaged Bytes: 124850176, Memory Page Faults sec: 1884.550903, Memory Transition Faults sec: 818.2865724, Memory System Cache Resident Bytes: 63774720, Memory Long-Term Average Standby Cache Lifetime (s): 13037, Memory Standby Cache Reserve Bytes: 3506176, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 215363584, Memory System Driver Resident Bytes: 3891200, Memory Standby Cache Normal Priority Bytes: 205160448, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 59.20479911, Memory Free System Page Table Entries: 12262862, Memory Available MBytes: 1497, Memory Modified Page List Bytes: 3063808, Memory Cache Faults sec: 65.84720125, Memory Committed Bytes: 3575144448, Memory System Driver Total Bytes: 19177472, Memory Pages Input sec: 2.101506423, Memory Pool Paged Resident Bytes: 160743424, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 12997.21481, LogicalDisk(_Total) pct_ Idle Time: 99.94002244, LogicalDisk(_Total) Disk Reads sec: 0.100071734, LogicalDisk(_Total) pct_ Free Space: 81.36741863, LogicalDisk(_Total) Disk Read Bytes sec: 2869.256769, LogicalDisk(_Total) Avg  Disk sec Read: 0.0008424, LogicalDisk(_Total) Disk Writes sec: 13.50968415, LogicalDisk(_Total) Current Disk Queue Length: 1, LogicalDisk(_Total) Split IO Sec: 0.300215203, LogicalDisk(_Total) Free Megabytes: 166529, LogicalDisk(_Total) Avg  Disk sec Write: 0.000211226, LogicalDisk(_Total) Disk Bytes sec: 178457.5237, LogicalDisk(_Total) Avg  Disk Read Queue Length: 8.43E-05, LogicalDisk(_Total) pct_ Disk Time: 0.097968713, LogicalDisk(_Total) Avg  Disk Bytes Read: 28672, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.002854718, LogicalDisk(_Total) Avg  Disk Queue Length: 0.002939051, LogicalDisk(_Total) pct_ Disk Read Time: 0.002811119, LogicalDisk(_Total) Disk Write Bytes sec: 175588.2669, LogicalDisk(_Total) Disk Transfers sec: 13.60975588, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 13112.47059, LogicalDisk(_Total) pct_ Disk Write Time: 0.095157594, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000215867

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 48092, dst_ip: 192.168.1.184, dst_port: 21, proto: tcp, service: -, duration: 0.000091, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 60, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49541, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.000136, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1270, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 4, Status: -, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] date: 26-Apr-19, time:  14:17:45 , FC1_Read_Input_Register: 45980, FC2_Read_Discrete_Value: 35048, FC3_Read_Holding_Register: 54502, FC4_Read_Coil: 27205

[Assistant] attack


[User] PID: 2359, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: vmtoolsd

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 5, dst_ip: 192.168.1.169, dst_port: 1, proto: icmp, service: -, duration: 0.100696, src_bytes: 184, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 4, src_ip_bytes: 296, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:44:00, latitude: 1.151568336, longitude: 10.98853207

[Assistant] normal


[User] Processor(_Total) DPC Rate: 2, Processor(_Total) pct_ Idle Time: 94.63541667, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 5.104166667, Processor(_Total) pct_ C1 Time: 93.33333333, Processor(_Total) pct_ Processor Time: 5.364583333, Processor(_Total) C1 Transitions sec: 312.6653952, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 0.260416667, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 36.73318395, Processor(_Total) Interrupts sec: 227.3990752, Process(_Total) Pool Paged Bytes: 10132768, Process(_Total) IO Read Operations sec: 7.999967467, Process(_Total) Working Set - Private: 2450558976, Process(_Total) Working Set Peak: 3863052288, Process(_Total) IO Write Operations sec: 5.866642809, Process(_Total) Page File Bytes: 3635195904, Process(_Total) pct_ User Time: 10.20833333, Process(_Total) Virtual Bytes Peak: 10917023744, Process(_Total) Page File Bytes Peak: 4001230848, Process(_Total) IO Other Bytes sec: 16429.66652, Process(_Total) Private Bytes: 3635195904, Process(_Total) IO Write Bytes sec: 14333.80838, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 9658769408, Process(_Total) pct_ Processor Time: 200, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1521384, Process(_Total) Working Set: 2568093696, Process(_Total) Page Faults sec: 602.3975502, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 869.996462, Process(_Total) IO Data Operations sec: 13.86661028, Process(_Total) Thread Count: 630, Process(_Total) pct_ Privileged Time: 189.7916667, Process(_Total) IO Data Bytes sec: 19104.45564, Process(_Total) IO Read Bytes sec: 4770.647266, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 16571, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 2883.788273, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 419.4649608, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 3303.253233, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 6.933305138, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 8.799964213, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 15.73326935, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 6.933305138, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 8.799964213, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 99192832, Memory Free & Zero Page List Bytes: 102641664, Memory Cache Bytes Peak: 139370496, Memory System Code Resident Bytes: 20480, Memory Available Bytes: 217128960, Memory Commit Limit: 6070345728, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 21.79991135, Memory Demand Zero Faults sec: 643.5307163, Memory Available KBytes: 212040, Memory Pages sec: 59.53309123, Memory Cache Bytes: 1327104, Memory Pool Nonpaged Bytes: 70516736, Memory Page Faults sec: 767.9968768, Memory Transition Faults sec: 100.9329229, Memory System Cache Resident Bytes: 1327104, Memory Standby Cache Reserve Bytes: 565248, Memory Page Writes sec: 0, Memory System Code Total Bytes: 4370432, Memory Standby Cache Core Bytes: 65744896, Memory System Driver Resident Bytes: 1888256, Memory Standby Cache Normal Priority Bytes: 48177152, Memory Pool Paged Allocs: 62682, Memory Pool Nonpaged Allocs: 65560, Memory pct_ Committed Bytes In Use: 67.56341691, Memory Free System Page Table Entries: 33556544, Memory Available MBytes: 207, Memory Modified Page List Bytes: 163840, Memory Cache Faults sec: 4.266649316, Memory Committed Bytes: 4101332992, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 59.53309123, Memory Pool Paged Resident Bytes: 20799488, Memory Write Copies sec: 7.733301885

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 43697, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000034, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 1339, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: whoopsie

[Assistant] normal


[User] src_ip: 192.168.1.33, src_port: 42369, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 1, dst_ip_bytes: 52, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 28-Apr-19, time:  12:11:36 , FC1_Read_Input_Register: 58047, FC2_Read_Discrete_Value: 53223, FC3_Read_Holding_Register: 12006, FC4_Read_Coil: 40014

[Assistant] attack


[User] date: 31-Mar-19, time: 12:42:31, FC1_Read_Input_Register: 24079, FC2_Read_Discrete_Value: 28916, FC3_Read_Holding_Register: 17565, FC4_Read_Coil: 7487

[Assistant] normal


[User] PID: 3257, MINFLT: 9786, MAJFLT: 0, VSTEXT: 193, VSIZE: 1.8, RSIZE: 262, VGROW: 0, RGROW: 19684, MEM: 0.07, CMD: Web-Content

[Assistant] normal


[User] Processor_DPC_Rate: 65, Processor_pct_ Idle_Time: 41.42514117, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.156253769, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 19.37546734, Processor_pct_ C1_Time: 41.42514117, Processor_pct_ Processor_Time: 49.8425402, Processor_C1_ransitions_sec: 3261.875023, Processor_pct_ DPC_Time: 1.562537688, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 30.46948492, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 1975.945447, Processor_Interrupts_sec: 6865.457906, Process_Pool_Paged Bytes: 24608832, Process_IO Read_Operations_sec: 5.800133403, Process_Working_Set_ Private: 1553719296, Process_Working_Set_Peak: 5964161024, Process_IO_Write Operations_sec: 1.600036801, Process_Page_File Bytes: 4876222464, Process_pct_ User_Time: 38.75093467, Process_Virtual_Bytes Peak: 1.57E+14, Process_Page_File Bytes Peak: 6030565376, Process_IO_Other_Bytes_sec: 5319.922358, Process_Private_Bytes: 4876222464, Process_IO_Write_Bytes_sec: 205.8047335, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.57E+14, Process_pct_ Processor_Time: 196.5672412, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 3084432, Process_Working Set: 1630195712, Process_Page Faults_sec: 39721.01358, Process_ID Process: 0, Process_IO Other Operations_sec: 106.302445, Process_IO Data Operations_sec: 7.400170204, Process_Thread Count: 1061, Process_pct_ Privileged_Time: 157.8163065, Process_IO Data Bytes_sec: 1376.831667, Process_IO Read Bytes_sec: 1171.026934, Process_Priority Base: 0, Process_Handle Count: 39972, Network_I(Intel R _82574L_GNC)TCP_APS: 5476, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4758.109437, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 225.6051889, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 4983.714625, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 4.200096602, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 6.200142603, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 10.40023921, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 1, Network_I(Intel R _82574L_GNC) Packets Sent sec: 4.200096602, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 6.200142603, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 105312256, Memory Free & Zero Page List Bytes: 2113536, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 797474816, Memory Commit Limit: 6891933696, Memory Transition Pages RePurposed sec: 5131.71803, Memory Pages Output sec: 3397.478142, Memory Page Reads sec: 1698.039055, Memory Demand Zero Faults sec: 728.216749, Memory Available KBytes: 778784, Memory Pages sec: 9494.918383, Memory Cache Bytes: 1040384, Memory Pool Nonpaged Bytes: 108613632, Memory Page Faults sec: 39884.81735, Memory Transition Faults sec: 29364.87539, Memory System Cache Resident Bytes: 1040384, Memory Long-Term Average Standby Cache Lifetime (s): 21, Memory Standby Cache Reserve Bytes: 461254656, Memory Page Writes sec: 210.5048416, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 223137792, Memory System Driver Resident Bytes: 1.76E+13, Memory Standby Cache Normal Priority Bytes: 110952448, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 84.45020537, Memory Free System Page Table Entries: 12209661, Memory Available MBytes: 760, Memory Modified Page List Bytes: 249856, Memory Cache Faults sec: 3.800087402, Memory Committed Bytes: 5820252160, Memory System Driver Total Bytes: 18178048, Memory Pages Input sec: 6097.440241, Memory Pool Paged Resident Bytes: 22421504, Memory Write Copies sec: 0.7000161, LogicalDisk(_Total) Avg  Disk Bytes Write: 66000.17449, LogicalDisk(_Total) pct_ Idle Time: 82.64072929, LogicalDisk(_Total) Disk Reads sec: 1667.738358, LogicalDisk(_Total) pct_ Free Space: 82.0949561, LogicalDisk(_Total) Disk Read Bytes sec: 25452412.61, LogicalDisk(_Total) Avg  Disk sec Read: 0.000376351, LogicalDisk(_Total) Disk Writes sec: 210.9048508, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.3000069, LogicalDisk(_Total) Free Megabytes: 168018, LogicalDisk(_Total) Avg  Disk sec Write: 0.000200855, LogicalDisk(_Total) Disk Bytes sec: 39372169.56, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.627654989, LogicalDisk(_Total) pct_ Disk Time: 22.33387769, LogicalDisk(_Total) Avg  Disk Bytes Read: 15261.63411, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.042361352, LogicalDisk(_Total) Avg  Disk Queue Length: 0.670016341, LogicalDisk(_Total) pct_ Disk Read Time: 20.92183363, LogicalDisk(_Total) Disk Write Bytes sec: 13919756.95, LogicalDisk(_Total) Disk Transfers sec: 1878.643209, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 20957.76855, LogicalDisk(_Total) pct_ Disk Write Time: 1.412045059, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000356649

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 37738, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.179515, src_bytes: 282, dst_bytes: 1919, conn_state: S3, missed_bytes: 0, src_pkts: 4, src_ip_bytes: 498, dst_pkts: 5, dst_ip_bytes: 2187, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] Processor(_Total) DPC Rate: 51, Processor(_Total) pct_ Idle Time: 76.5625, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 1.979166667, Processor(_Total) pct_ C1 Time: 73.33333333, Processor(_Total) pct_ Processor Time: 23.4375, Processor(_Total) C1 Transitions sec: 3272.695183, Processor(_Total) pct_ DPC Time: 0.520833333, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 21.45833333, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 3077.160146, Processor(_Total) Interrupts sec: 4377.838146, Process(_Total) Pool Paged Bytes: 8026736, Process(_Total) IO Read Operations sec: 19.0668328, Process(_Total) Working Set - Private: 747323392, Process(_Total) Working Set Peak: 2071961600, Process(_Total) IO Write Operations sec: 1.600013941, Process(_Total) Page File Bytes: 1987010560, Process(_Total) pct_ User Time: 1.979166667, Process(_Total) Virtual Bytes Peak: 8151638016, Process(_Total) Page File Bytes Peak: 2347278336, Process(_Total) IO Other Bytes sec: 11042.76289, Process(_Total) Private Bytes: 1987010560, Process(_Total) IO Write Bytes sec: 911.2746069, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6991159296, Process(_Total) pct_ Processor Time: 99.47916667, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1054880, Process(_Total) Working Set: 801173504, Process(_Total) Page Faults sec: 4100.835732, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 503.5377208, Process(_Total) IO Data Operations sec: 20.66684674, Process(_Total) Thread Count: 543, Process(_Total) pct_ Privileged Time: 97.5, Process(_Total) IO Data Bytes sec: 1481.546243, Process(_Total) IO Read Bytes sec: 570.2716356, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13976, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 433.3371091, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 141.7345683, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 575.0716775, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 1.333344951, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 2.800024398, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 4.133369349, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 1.333344951, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 2.800024398, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 97116160, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 80883712, Memory System Code Resident Bytes: 741376, Memory Available Bytes: 13451264, Memory Commit Limit: 2601299968, Memory Transition Pages RePurposed sec: 3846.366848, Memory Pages Output sec: 6132.053431, Memory Page Reads sec: 2122.151824, Memory Demand Zero Faults sec: 790.2068853, Memory Available KBytes: 13136, Memory Pages sec: 10556.89199, Memory Cache Bytes: 602112, Memory Pool Nonpaged Bytes: 57004032, Memory Page Faults sec: 4351.237914, Memory Transition Faults sec: 1435.479174, Memory System Cache Resident Bytes: 602112, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 1050.875823, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 114688, Memory System Driver Resident Bytes: 1314816, Memory Standby Cache Normal Priority Bytes: 13336576, Memory Pool Paged Allocs: 61759, Memory Pool Nonpaged Allocs: 53403, Memory pct_ Committed Bytes In Use: 90.14538257, Memory Free System Page Table Entries: 33563833, Memory Available MBytes: 12, Memory Modified Page List Bytes: 61440, Memory Cache Faults sec: 6.200054023, Memory Committed Bytes: 2344951808, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 4424.838555, Memory Pool Paged Resident Bytes: 12484608, Memory Write Copies sec: 0

[Assistant] normal


[User] date: 31-Mar-19, time: 12:42:59, temperature: 22.82759636, pressure: 2.873315794, humidity: 15.13582391

[Assistant] normal


[User] src_ip: 192.168.1.37, src_port: 41889, dst_ip: 192.168.1.193, dst_port: 135, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2477, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: gsd-color

[Assistant] attack


[User] PID: 3676, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] date: 1-Apr-19, time:  18:12:49 , latitude: 109.0953872, longitude: 114.9834488

[Assistant] normal


[User] PID: 8387, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vsftpd, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 49029, dst_ip: 192.168.1.49, dst_port: 8888, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:05, FC1_Read_Input_Register: 31737, FC2_Read_Discrete_Value: 15748, FC3_Read_Holding_Register: 13144, FC4_Read_Coil: 59466

[Assistant] normal


[User] PID: 1243, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] PID: 4550, MINFLT: 0, MAJFLT: 0, VSTEXT: 596, VSIZE: 184.4, RSIZE: 6368, VGROW: 0, RGROW: 0, MEM: 0, CMD: apache2

[Assistant] attack


[User] date: 28-Apr-19, time:  17:02:24 , fridge_temperature: 6.8, temp_condition: high

[Assistant] attack


[User] Processor(_Total) DPC Rate: 7, Processor(_Total) pct_ Idle Time: 70.62959846, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.104173449, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 0.625040694, Processor(_Total) pct_ C1 Time: 66.67100739, Processor(_Total) pct_ Processor Time: 29.37040154, Processor(_Total) C1 Transitions sec: 3711.886139, Processor(_Total) pct_ DPC Time: 0.104173449, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 28.75187194, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 3696.685514, Processor(_Total) Interrupts sec: 5009.006204, Process(_Total) Pool Paged Bytes: 7816888, Process(_Total) IO Read Operations sec: 2.133421159, Process(_Total) Working Set - Private: 761688064, Process(_Total) Working Set Peak: 2058907648, Process(_Total) IO Write Operations sec: 1.533396458, Process(_Total) Page File Bytes: 2136129536, Process(_Total) pct_ User Time: 0.625040694, Process(_Total) Virtual Bytes Peak: 8071090176, Process(_Total) Page File Bytes Peak: 2749116416, Process(_Total) IO Other Bytes sec: 1937.546429, Process(_Total) Private Bytes: 2136129536, Process(_Total) IO Write Bytes sec: 789.2991595, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6826381312, Process(_Total) pct_ Processor Time: 99.79816419, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1065264, Process(_Total) Working Set: 813871104, Process(_Total) Page Faults sec: 4580.32189, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 94.40388629, Process(_Total) IO Data Operations sec: 3.666817617, Process(_Total) Thread Count: 573, Process(_Total) pct_ Privileged Time: 99.1731235, Process(_Total) IO Data Bytes sec: 1028.775685, Process(_Total) IO Read Bytes sec: 239.4765251, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13875, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 299.4123258, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 75.46977351, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 374.8820993, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 1.200049402, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 3.333470561, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 4.533519963, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 1.200049402, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 3.333470561, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 95985664, Memory Free & Zero Page List Bytes: 13611008, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 704512, Memory Available Bytes: 20328448, Memory Commit Limit: 2918703104, Memory Transition Pages RePurposed sec: 5488.892626, Memory Pages Output sec: 3635.482994, Memory Page Reads sec: 3001.590232, Memory Demand Zero Faults sec: 394.4162368, Memory Available KBytes: 19852, Memory Pages sec: 9515.125039, Memory Cache Bytes: 335872, Memory Pool Nonpaged Bytes: 79290368, Memory Page Faults sec: 4734.26156, Memory Transition Faults sec: 1339.388471, Memory System Cache Resident Bytes: 335872, Memory Standby Cache Reserve Bytes: 77824, Memory Page Writes sec: 778.5653843, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 1241088, Memory System Driver Resident Bytes: 1232896, Memory Standby Cache Normal Priority Bytes: 5398528, Memory Pool Paged Allocs: 59188, Memory Pool Nonpaged Allocs: 58377, Memory pct_ Committed Bytes In Use: 86.00271691, Memory Free System Page Table Entries: 33562140, Memory Available MBytes: 19, Memory Modified Page List Bytes: 24576, Memory Cache Faults sec: 0.466685879, Memory Committed Bytes: 2510163968, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 5879.642045, Memory Pool Paged Resident Bytes: 14467072, Memory Write Copies sec: 0

[Assistant] normal


[User] PID: 2925, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: nautilus, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.180, src_port: 51294, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.017628, src_bytes: 31, dst_bytes: 106, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 59, dst_pkts: 1, dst_ip_bytes: 134, dns_query: elasticsearch, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 3735, MINFLT: 25, MAJFLT: 0, VSTEXT: 956, VSIZE: 27308, RSIZE: 4264, VGROW: 0, RGROW: 20, MEM: 0, CMD: bash

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49720, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.017174, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 26-Apr-19, time:  17:09:22 , motion_status: 1, light_status:  on

[Assistant] attack


[User] PID: 4470, MINFLT: 0, MAJFLT: 0, VSTEXT: 959, VSIZE: 114.7, RSIZE: 99, VGROW: 0, RGROW: 0, MEM: 0.03, CMD: tcpdump

[Assistant] normal


[User] PID: 2973, TRUN: 0, TSLPI: 4, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: compiz

[Assistant] attack


[User] date: 25-Apr-19, time:  16:06:36 , motion_status: 1, light_status:  on

[Assistant] attack


[User] PID: 11158, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] PID: 1134, MINFLT: 13, MAJFLT: 0, VSTEXT: 152, VSIZE: 23552, RSIZE: 1404, VGROW: 0, RGROW: 0, MEM: 0, CMD: vsftpd

[Assistant] attack


[User] date: 28-Apr-19, time:  04:11:17 , fridge_temperature: 5.05, temp_condition: low

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 58585, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.003706, src_bytes: 84, dst_bytes: 436, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 140, dst_pkts: 2, dst_ip_bytes: 492, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3793, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: drone, attack: 0

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:24, latitude: 1.324709922, longitude: 11.05079574

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 67, dst_ip: 192.168.1.152, dst_port: 67, proto: tcp, service: -, duration: 0.000017, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 6497, MINFLT: 1, MAJFLT: 0, VSTEXT: 193, VSIZE: 2.1, RSIZE: 201.9, VGROW: 0, RGROW: 0, MEM: 0.06, CMD: firefox

[Assistant] attack


[User] PID: 3894, RDDSK: 0, WRDSK: 8, WCANCL: 0, DSK: 0.07, CMD: atop, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 56182, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.002303, src_bytes: 54, dst_bytes: 54, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 82, dst_pkts: 1, dst_ip_bytes: 82, dns_query: testphp.vulnweb.com/listproducts.php, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: T, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 26-Apr-19, time:  19:02:33 , FC1_Read_Input_Register: 24850, FC2_Read_Discrete_Value: 19869, FC3_Read_Holding_Register: 36462, FC4_Read_Coil: 57259

[Assistant] attack


[User] PID: 2797, MINFLT: 9, MAJFLT: 0, VSTEXT: 1350, VSIZE: 1.4, RSIZE: 95688, VGROW: 0, RGROW: 0, MEM: 0.03, CMD: nautilus

[Assistant] normal


[User] PID: 1480, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: Xorg, attack: 1

[Assistant] attack


[User] PID: 1851, MINFLT: 0, MAJFLT: 0, VSTEXT: 36, VSIZE: 159.8, RSIZE: 1880, VGROW: 0, RGROW: 0, MEM: 0, CMD: vmtoolsd

[Assistant] normal


[User] date: 2-Apr-19, time:  04:06:31 , motion_status: 1, light_status:  on

[Assistant] normal


[User] date: 25-Apr-19, time:  16:52:53 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] PID: 3678, MINFLT: 2076, MAJFLT: 0, VSTEXT: 148, VSIZE: 17948, RSIZE: 2608, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] date: 25-Apr-19, time: 8:58:24, latitude: 47.62920595, longitude: 59.65554907

[Assistant] attack


[User] date: 2-Apr-19, time:    04:02:08   , fridge_temperature: 2.9, temp_condition: low

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:49, current_temperature: 26.28260648, thermostat_status: 1

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 66.67839598, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.156249789, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 13.12498228, Processor_pct_ C1_Time: 66.67839598, Processor_pct_ Processor_Time: 31.09384302, Processor_C1_ransitions_sec: 305.2373397, Processor_pct_ DPC_Time: 0.85937384, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 17.96872574, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 288.0352354, Processor_Interrupts_sec: 1054.529001, Process_Pool_Paged Bytes: 27736584, Process_IO Read_Operations_sec: 57.1069859, Process_Working_Set_ Private: 566067200, Process_Working_Set_Peak: 3888406528, Process_IO_Write Operations_sec: 46.20565234, Process_Page_File Bytes: 1972088832, Process_pct_ User_Time: 26.24996456, Process_Virtual_Bytes Peak: 2.54E+14, Process_Page_File Bytes Peak: 2658799616, Process_IO_Other_Bytes_sec: 85836.30035, Process_Private_Bytes: 1972088832, Process_IO_Write_Bytes_sec: 30418.72112, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 2.54E+14, Process_pct_ Processor_Time: 197.9684827, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2621424, Process_Working Set: 2099310592, Process_Page Faults_sec: 1584.89388, Process_ID Process: 0, Process_IO Other Operations_sec: 3954.38374, Process_IO Data Operations_sec: 103.3126382, Process_Thread Count: 1495, Process_pct_ Privileged_Time: 171.7185182, Process_IO Data Bytes_sec: 43638.23827, Process_IO Read Bytes_sec: 13219.51714, Process_Priority Base: 0, Process_Handle Count: 50717, Network_I(Intel R _82574L_GNC)TCP_APS: 8480, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 13408.74029, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 38071.25726, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 51479.99755, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 130.2159293, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 147.6180581, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 277.8339874, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 7, Network_I(Intel R _82574L_GNC) Packets Sent sec: 130.2159293, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 147.6180581, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 140124160, Memory Free & Zero Page List Bytes: 958791680, Memory Cache Bytes Peak: 73678848, Memory System Code Resident Bytes: 0, Memory Available Bytes: 1679187968, Memory Commit Limit: 6038605824, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 4.100501614, Memory Demand Zero Faults sec: 841.2029044, Memory Available KBytes: 1639832, Memory Pages sec: 9.301137808, Memory Cache Bytes: 38780928, Memory Pool Nonpaged Bytes: 111820800, Memory Page Faults sec: 1663.703521, Memory Transition Faults sec: 791.6968483, Memory System Cache Resident Bytes: 38780928, Memory Long-Term Average Standby Cache Lifetime (s): 6605, Memory Standby Cache Reserve Bytes: 340635648, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 206041088, Memory System Driver Resident Bytes: 3870720, Memory Standby Cache Normal Priority Bytes: 173719552, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 59.38807639, Memory Free System Page Table Entries: 12262875, Memory Available MBytes: 1601, Memory Modified Page List Bytes: 40640512, Memory Cache Faults sec: 68.10833169, Memory Committed Bytes: 3586211840, Memory System Driver Total Bytes: 19165184, Memory Pages Input sec: 9.301137808, Memory Pool Paged Resident Bytes: 107704320, Memory Write Copies sec: 4.200513849, LogicalDisk(_Total) Avg  Disk Bytes Write: 14724.74074, LogicalDisk(_Total) pct_ Idle Time: 99.81629025, LogicalDisk(_Total) Disk Reads sec: 2.600318097, LogicalDisk(_Total) pct_ Free Space: 81.54234034, LogicalDisk(_Total) Disk Read Bytes sec: 31952.70877, LogicalDisk(_Total) Avg  Disk sec Read: 0.000620023, LogicalDisk(_Total) Disk Writes sec: 10.80132133, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.400048938, LogicalDisk(_Total) Free Megabytes: 166887, LogicalDisk(_Total) Avg  Disk sec Write: 0.000328648, LogicalDisk(_Total) Disk Bytes sec: 190999.365, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.001612058, LogicalDisk(_Total) pct_ Disk Time: 0.172048768, LogicalDisk(_Total) Avg  Disk Bytes Read: 12288, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.003549395, LogicalDisk(_Total) Avg  Disk Queue Length: 0.005161453, LogicalDisk(_Total) pct_ Disk Read Time: 0.053734927, LogicalDisk(_Total) Disk Write Bytes sec: 159046.6562, LogicalDisk(_Total) Disk Transfers sec: 13.40163942, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 14251.9403, LogicalDisk(_Total) pct_ Disk Write Time: 0.11831284, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000385184

[Assistant] attack


[User] date: 28-Apr-19, time:  04:58:48 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] date: 2-Apr-19, time:  04:06:32 , motion_status: 0, light_status:  off

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 58180, dst_ip: 117.18.237.70, dst_port: 443, proto: tcp, service: ssl, duration: 180.968219, src_bytes: 1049, dst_bytes: 5137, conn_state: SF, missed_bytes: 0, src_pkts: 23, src_ip_bytes: 2589, dst_pkts: 20, dst_ip_bytes: 6197, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2618, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: unity-panel-se, attack: 0

[Assistant] normal


[User] date: 28-Apr-19, time:  12:39:21 , FC1_Read_Input_Register: 51044, FC2_Read_Discrete_Value: 50902, FC3_Read_Holding_Register: 44693, FC4_Read_Coil: 39762

[Assistant] attack


[User] date: 26-Apr-19, time:  15:53:55 , latitude: 73.00955058, longitude: 78.97056023

[Assistant] attack


[User] PID: 1368, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vmtoolsd, attack: 1

[Assistant] attack


[User] PID: 4326, MINFLT: 3563, MAJFLT: 0, VSTEXT: 148, VSIZE: 18176, RSIZE: 2676, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] attack


[User] PID: 4374, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 44804, dst_ip: 40.90.190.179, dst_port: 443, proto: tcp, service: ssl, duration: 0.618732, src_bytes: 269, dst_bytes: 3642, conn_state: SF, missed_bytes: 0, src_pkts: 20, src_ip_bytes: 1378, dst_pkts: 7, dst_ip_bytes: 3934, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 1-Apr-19, time:  19:11:01 , current_temperature: 29.15908208, thermostat_status: 1

[Assistant] normal


[User] date: 31-Mar-19, time:    12:40:47   , fridge_temperature: 4.15, temp_condition: low

[Assistant] normal


[User] PID: 4470, MINFLT: 0, MAJFLT: 0, VSTEXT: 959, VSIZE: 114.7, RSIZE: 99, VGROW: 0, RGROW: 0, MEM: 0.03, CMD: tcpdump

[Assistant] normal


[User] date: 31-Mar-19, time: 12:44:43, latitude: 2.353549451, longitude: 12.26057033

[Assistant] normal


[User] date: 28-Apr-19, time:  23:55:17 , door_state: closed, sphone_signal: 0

[Assistant] attack


[User] src_ip: 192.168.1.37, src_port: 44055, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 1205, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 1-Apr-19, time:  15:03:52 , latitude: 4.182689505, longitude: 13.47316907

[Assistant] normal


[User] PID: 3676, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 50326, dst_ip: 192.168.1.190, dst_port: 21, proto: tcp, service: ftp, duration: 10.778978, src_bytes: 88, dst_bytes: 188, conn_state: RSTR, missed_bytes: 0, src_pkts: 17, src_ip_bytes: 980, dst_pkts: 16, dst_ip_bytes: 1016, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 53922, dst_ip: 192.168.1.103, dst_port: 5001, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 38588, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 0.009871, src_bytes: 155, dst_bytes: 978, conn_state: SF, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 415, dst_pkts: 4, dst_ip_bytes: 1150, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2119, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 0

[Assistant] normal


[User] Processor_DPC_Rate: 71, Processor_pct_ Idle_Time: 59.07676912, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.078005704, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 11.77886123, Processor_pct_ C1_Time: 59.07676912, Processor_pct_ Processor_Time: 34.31919762, Processor_C1_ransitions_sec: 3156.105529, Processor_pct_ DPC_Time: 0.780057035, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 22.54364832, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 2716.173833, Processor_Interrupts_sec: 5037.04817, Process_Pool_Paged Bytes: 22236832, Process_IO Read_Operations_sec: 5.791202526, Process_Working_Set_ Private: 1711984640, Process_Working_Set_Peak: 6165905408, Process_IO_Write Operations_sec: 1.198179833, Process_Page_File Bytes: 4766158848, Process_pct_ User_Time: 23.55772247, Process_Virtual_Bytes Peak: 1.52E+14, Process_Page_File Bytes Peak: 7069134848, Process_IO_Other_Bytes_sec: 6400.57682, Process_Private_Bytes: 4766158848, Process_IO_Write_Bytes_sec: 156.1627716, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.52E+14, Process_pct_ Processor_Time: 198.2904984, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 3127616, Process_Working Set: 1795276800, Process_Page Faults_sec: 17422.6331, Process_ID Process: 0, Process_IO Other Operations_sec: 101.8452858, Process_IO Data Operations_sec: 6.989382359, Process_Thread Count: 1021, Process_pct_ Privileged_Time: 174.7327759, Process_IO Data Bytes_sec: 1325.386592, Process_IO Read Bytes_sec: 1169.22382, Process_Priority Base: 0, Process_Handle Count: 38839, Network_I(Intel R _82574L_GNC)TCP_APS: 5139, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4951.578008, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 260.8038103, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5212.381819, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 4.792719332, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 8.187562192, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 12.98028152, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 2, Network_I(Intel R _82574L_GNC) Packets Sent sec: 4.792719332, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 8.187562192, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 103837696, Memory Free & Zero Page List Bytes: 2154496, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 583086080, Memory Commit Limit: 8464515072, Memory Transition Pages RePurposed sec: 10738.58691, Memory Pages Output sec: 2261.065193, Memory Page Reads sec: 2426.114465, Memory Demand Zero Faults sec: 5161.858569, Memory Available KBytes: 569420, Memory Pages sec: 12926.46328, Memory Cache Bytes: 1146880, Memory Pool Nonpaged Bytes: 112201728, Memory Page Faults sec: 17444.49989, Memory Transition Faults sec: 4899.057792, Memory System Cache Resident Bytes: 1146880, Memory Long-Term Average Standby Cache Lifetime (s): 52, Memory Standby Cache Reserve Bytes: 252018688, Memory Page Writes sec: 224.1594771, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 196972544, Memory System Driver Resident Bytes: 1.76E+13, Memory Standby Cache Normal Priority Bytes: 131940352, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 67.15932779, Memory Free System Page Table Entries: 12216487, Memory Available MBytes: 556, Memory Modified Page List Bytes: 73617408, Memory Cache Faults sec: 8.187562192, Memory Committed Bytes: 5684711424, Memory System Driver Total Bytes: 18223104, Memory Pages Input sec: 10665.39809, Memory Pool Paged Resident Bytes: 26796032, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 41168.43282, LogicalDisk(_Total) pct_ Idle Time: 73.64965138, LogicalDisk(_Total) Disk Reads sec: 2408.541161, LogicalDisk(_Total) pct_ Free Space: 81.30634262, LogicalDisk(_Total) Disk Read Bytes sec: 43916134.56, LogicalDisk(_Total) Avg  Disk sec Read: 0.000397293, LogicalDisk(_Total) Disk Writes sec: 225.1579603, LogicalDisk(_Total) Current Disk Queue Length: 1, LogicalDisk(_Total) Split IO Sec: 0.099848319, LogicalDisk(_Total) Free Megabytes: 166404, LogicalDisk(_Total) Avg  Disk sec Write: 0.000215618, LogicalDisk(_Total) Disk Bytes sec: 53185534.92, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.956886125, LogicalDisk(_Total) pct_ Disk Time: 33.51446033, LogicalDisk(_Total) Avg  Disk Bytes Read: 18233.49971, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.048547665, LogicalDisk(_Total) Avg  Disk Queue Length: 1.00543379, LogicalDisk(_Total) pct_ Disk Read Time: 31.89620418, LogicalDisk(_Total) Disk Write Bytes sec: 9269400.361, LogicalDisk(_Total) Disk Transfers sec: 2633.699121, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 20194.23346, LogicalDisk(_Total) pct_ Disk Write Time: 1.618255154, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000381761

[Assistant] normal


[User] PID: 6314, TRUN: 0, TSLPI: 0, TSLPU: 0, POLI: 0, NICE: 0, PRI: 0, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: E, CPU: 0, CMD: <apache2>

[Assistant] attack


[User] date: 25-Apr-19, time: 8:27:21, temperature: 37.57890186, pressure: -4.141623226, humidity: 54.63863566

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 46373, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000026, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 1270, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] date: 27-Apr-19, time:  05:16:00 , motion_status: 0, light_status:  off

[Assistant] attack


[User] src_ip: 192.168.1.32, src_port: 54536, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 6.465962, src_bytes: 2335, dst_bytes: 1229, conn_state: S3, missed_bytes: 0, src_pkts: 7, src_ip_bytes: 3594, dst_pkts: 5, dst_ip_bytes: 1509, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 1967, TRUN: 0, TSLPI: 2, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: 0, EXC: 0, State: S, CPU: 0, CMD: vmtoolsd

[Assistant] attack


[User] date: 25-Apr-19, time:  15:09:12 , fridge_temperature: 2.15, temp_condition: low

[Assistant] attack


[User] PID: 4372, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: atop

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:33, FC1_Read_Input_Register: 37489, FC2_Read_Discrete_Value: 31450, FC3_Read_Holding_Register: 32566, FC4_Read_Coil: 7871

[Assistant] normal


[User] date: 28-Apr-19, time:  05:26:37 , fridge_temperature: 3, temp_condition: low

[Assistant] attack