[User] Processor_DPC_Rate: 7, Processor_pct_ Idle_Time: 96.86422075, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 0.46873524, Processor_pct_ C1_Time: 96.86422075, Processor_pct_ Processor_Time: 1.01874192, Processor_C1_ransitions_sec: 474.8834218, Processor_pct_ DPC_Time: 0.15624508, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 0.546857779, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 121.7957481, Processor_Interrupts_sec: 563.8803149, Process_Pool_Paged Bytes: 33620632, Process_IO Read_Operations_sec: 2.799902255, Process_Working_Set_ Private: 568328192, Process_Working_Set_Peak: 4680171520, Process_IO_Write Operations_sec: 4.199853383, Process_Page_File Bytes: 1861464064, Process_pct_ User_Time: 0.937470479, Process_Virtual_Bytes Peak: 2.65E+14, Process_Page_File Bytes Peak: 2658861056, Process_IO_Other_Bytes_sec: 7219.947952, Process_Private_Bytes: 1861464064, Process_IO_Write_Bytes_sec: 75732.75617, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 2.65E+14, Process_pct_ Processor_Time: 199.681212, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 3464696, Process_Working Set: 1945214976, Process_Page Faults_sec: 829.3710467, Process_ID Process: 0, Process_IO Other Operations_sec: 143.5949871, Process_IO Data Operations_sec: 6.999755639, Process_Thread Count: 1614, Process_pct_ Privileged_Time: 198.7437416, Process_IO Data Bytes_sec: 76012.34641, Process_IO Read Bytes_sec: 279.5902395, Process_Priority Base: 0, Process_Handle Count: 55346, Network_I(Intel R _82574L_GNC)TCP_APS: 12499, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 7474.93905, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 0, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 7474.93905, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 0, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 116.7959227, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 116.7959227, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 5, Network_I(Intel R _82574L_GNC) Packets Sent sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 116.7959227, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 179351552, Memory Free & Zero Page List Bytes: 170307584, Memory Cache Bytes Peak: 279379968, Memory System Code Resident Bytes: 0, Memory Available Bytes: 1528836096, Memory Commit Limit: 5770170368, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0, Memory Demand Zero Faults sec: 233.5918453, Memory Available KBytes: 1493004, Memory Pages sec: 0, Memory Cache Bytes: 26251264, Memory Pool Nonpaged Bytes: 104484864, Memory Page Faults sec: 829.3710467, Memory Transition Faults sec: 624.378203, Memory System Cache Resident Bytes: 26251264, Memory Long-Term Average Standby Cache Lifetime (s): 2154, Memory Standby Cache Reserve Bytes: 953454592, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 207896576, Memory System Driver Resident Bytes: 4513792, Memory Standby Cache Normal Priority Bytes: 197177344, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 64.38090114, Memory Free System Page Table Entries: 4294967295, Memory Available MBytes: 1458, Memory Modified Page List Bytes: 41525248, Memory Cache Faults sec: 0, Memory Committed Bytes: 3714887680, Memory System Driver Total Bytes: 17752064, Memory Pages Input sec: 0, Memory Pool Paged Resident Bytes: 110891008, Memory Write Copies sec: 0.299989527, LogicalDisk(_Total) Avg  Disk Bytes Write: 36677.81818, LogicalDisk(_Total) pct_ Idle Time: 99.96755902, LogicalDisk(_Total) Disk Reads sec: 0, LogicalDisk(_Total) pct_ Free Space: 81.83208494, LogicalDisk(_Total) Disk Read Bytes sec: 0, LogicalDisk(_Total) Avg  Disk sec Read: 0, LogicalDisk(_Total) Disk Writes sec: 2.199923201, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 167480, LogicalDisk(_Total) Avg  Disk sec Write: 0.000430432, LogicalDisk(_Total) Disk Bytes sec: 80688.38317, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0, LogicalDisk(_Total) pct_ Disk Time: 0.031564006, LogicalDisk(_Total) Avg  Disk Bytes Read: 0, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.00094692, LogicalDisk(_Total) Avg  Disk Queue Length: 0.00094692, LogicalDisk(_Total) pct_ Disk Read Time: 0, LogicalDisk(_Total) Disk Write Bytes sec: 80688.38317, LogicalDisk(_Total) Disk Transfers sec: 2.199923201, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 36677.81818, LogicalDisk(_Total) pct_ Disk Write Time: 0.031564006, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000430432

[Assistant] attack


[User] src_ip: 192.168.1.195, src_port: 1795, dst_ip: 192.168.1.195, dst_port: 1795, proto: tcp, service: -, duration: 0.229592, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 4373, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 2, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] PID: 1104, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: unattended-upg, attack: 1

[Assistant] attack


[User] src_ip: 192.168.1.193, src_port: 49708, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.011101, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 42816, dst_ip: 216.58.200.99, dst_port: 80, proto: tcp, service: http, duration: 138.100576, src_bytes: 2610, dst_bytes: 4278, conn_state: SF, missed_bytes: 0, src_pkts: 28, src_ip_bytes: 4074, dst_pkts: 26, dst_ip_bytes: 5638, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 55.87638864, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.156247983, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 28.82775283, Processor_pct_ C1_Time: 55.87638864, Processor_pct_ Processor_Time: 42.34449433, Processor_C1_ransitions_sec: 210.0972687, Processor_pct_ DPC_Time: 0, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 13.51545052, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 34.59955021, Processor_Interrupts_sec: 777.9898861, Process_Pool_Paged Bytes: 32215256, Process_IO Read_Operations_sec: 4.599940201, Process_Working_Set_ Private: 1055461376, Process_Working_Set_Peak: 4644786176, Process_IO_Write Operations_sec: 0.4999935, Process_Page_File Bytes: 2171371520, Process_pct_ User_Time: 57.65550567, Process_Virtual_Bytes Peak: 2.80E+14, Process_Page_File Bytes Peak: 2958049280, Process_IO_Other_Bytes_sec: 27743.53933, Process_Private_Bytes: 2171371520, Process_IO_Write_Bytes_sec: 6597.914227, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 2.80E+14, Process_pct_ Processor_Time: 199.6849221, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2998408, Process_Working Set: 2430582784, Process_Page Faults_sec: 1286.783272, Process_ID Process: 0, Process_IO Other Operations_sec: 350.695441, Process_IO Data Operations_sec: 5.099933701, Process_Thread Count: 1632, Process_pct_ Privileged_Time: 142.0294164, Process_IO Data Bytes_sec: 13096.02975, Process_IO Read Bytes_sec: 6498.115524, Process_Priority Base: 0, Process_Handle Count: 55520, Network_I(Intel R _82574L_GNC)TCP_APS: 8385, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 2740.464374, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 1341.182565, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 4081.646939, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 6.799911601, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 6.399916801, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 13.1998284, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 5, Network_I(Intel R _82574L_GNC) Packets Sent sec: 6.799911601, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 6.399916801, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 111374336, Memory Free & Zero Page List Bytes: 591040512, Memory Cache Bytes Peak: 78737408, Memory System Code Resident Bytes: 0, Memory Available Bytes: 922603520, Memory Commit Limit: 6172823552, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 0, Memory Page Reads sec: 0.0999987, Memory Demand Zero Faults sec: 877.68859, Memory Available KBytes: 900980, Memory Pages sec: 0.0999987, Memory Cache Bytes: 17063936, Memory Pool Nonpaged Bytes: 96854016, Memory Page Faults sec: 1373.582143, Memory Transition Faults sec: 616.4919856, Memory System Cache Resident Bytes: 17063936, Memory Long-Term Average Standby Cache Lifetime (s): 1386, Memory Standby Cache Reserve Bytes: 33873920, Memory Page Writes sec: 0, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 214827008, Memory System Driver Resident Bytes: 3743744, Memory Standby Cache Normal Priority Bytes: 82862080, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 68.7057451, Memory Free System Page Table Entries: 12279394, Memory Available MBytes: 879, Memory Modified Page List Bytes: 28012544, Memory Cache Faults sec: 3.499954501, Memory Committed Bytes: 4241084416, Memory System Driver Total Bytes: 18329600, Memory Pages Input sec: 0.0999987, Memory Pool Paged Resident Bytes: 72769536, Memory Write Copies sec: 1.5999792, LogicalDisk(_Total) Avg  Disk Bytes Write: 14563.55556, LogicalDisk(_Total) pct_ Idle Time: 99.98788516, LogicalDisk(_Total) Disk Reads sec: 0.0999987, LogicalDisk(_Total) pct_ Free Space: 80.75959016, LogicalDisk(_Total) Disk Read Bytes sec: 409.5946753, LogicalDisk(_Total) Avg  Disk sec Read: 0.0007624, LogicalDisk(_Total) Disk Writes sec: 0.8999883, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0.0999987, LogicalDisk(_Total) Free Megabytes: 165285, LogicalDisk(_Total) Avg  Disk sec Write: 0.000322444, LogicalDisk(_Total) Disk Bytes sec: 13516.62428, LogicalDisk(_Total) Avg  Disk Read Queue Length: 7.62E-05, LogicalDisk(_Total) pct_ Disk Time: 0.012213842, LogicalDisk(_Total) Avg  Disk Bytes Read: 4096, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.000290196, LogicalDisk(_Total) Avg  Disk Queue Length: 0.000366435, LogicalDisk(_Total) pct_ Disk Read Time: 0.002541967, LogicalDisk(_Total) Disk Write Bytes sec: 13107.02961, LogicalDisk(_Total) Disk Transfers sec: 0.999987, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 13516.8, LogicalDisk(_Total) pct_ Disk Write Time: 0.009672875, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.00036644

[Assistant] attack


[User] PID: 2608, MINFLT: 9, MAJFLT: 0, VSTEXT: 589, VSIZE: 652.5, RSIZE: 44624, VGROW: 132, RGROW: 264, MEM: 0.01, CMD: hud-service

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 50298, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 0.017621, src_bytes: 161, dst_bytes: 2009, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 381, dst_pkts: 5, dst_ip_bytes: 2221, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 34296, dst_ip: 192.168.1.152, dst_port: 10502, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time:    12:43:47   , door_state: open, sphone_signal: true

[Assistant] normal


[User] date: 31-Mar-19, time: 12:42:19, FC1_Read_Input_Register: 21012, FC2_Read_Discrete_Value: 35446, FC3_Read_Holding_Register: 18974, FC4_Read_Coil: 55183

[Assistant] normal


[User] PID: 4374, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: atop

[Assistant] normal


[User] PID: 4063, RDDSK: 0, WRDSK: 8, WCANCL: 0, DSK: 0.07, CMD: atop, attack: 1

[Assistant] attack


[User] Processor(_Total) DPC Rate: 28, Processor(_Total) pct_ Idle Time: 79.375, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.208333333, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 2.083333333, Processor(_Total) pct_ C1 Time: 80, Processor(_Total) pct_ Processor Time: 20.625, Processor(_Total) C1 Transitions sec: 2140.433147, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 18.54166667, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 1871.037366, Processor(_Total) Interrupts sec: 3103.484733, Process(_Total) Pool Paged Bytes: 7913704, Process(_Total) IO Read Operations sec: 132.2645954, Process(_Total) Working Set - Private: 796053504, Process(_Total) Working Set Peak: 2008670208, Process(_Total) IO Write Operations sec: 135.331214, Process(_Total) Page File Bytes: 2168479744, Process(_Total) pct_ User Time: 2.083333333, Process(_Total) Virtual Bytes Peak: 7993069568, Process(_Total) Page File Bytes Peak: 2603868160, Process(_Total) IO Other Bytes sec: 3929.805126, Process(_Total) Private Bytes: 2168479744, Process(_Total) IO Write Bytes sec: 37379.34797, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6881771520, Process(_Total) pct_ Processor Time: 99.79166667, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1307264, Process(_Total) Working Set: 852074496, Process(_Total) Page Faults sec: 4197.93426, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 200.7301899, Process(_Total) IO Data Operations sec: 267.5958094, Process(_Total) Thread Count: 555, Process(_Total) pct_ Privileged Time: 97.70833333, Process(_Total) IO Data Bytes sec: 69840.17297, Process(_Total) IO Read Bytes sec: 32460.825, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13631, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 13403.19011, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 258.9292785, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 13662.11938, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 4.399931097, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 10.53316838, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 14.93309948, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 4.399931097, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 10.53316838, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 91058176, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 704512, Memory Available Bytes: 7852032, Memory Commit Limit: 2901925888, Memory Transition Pages RePurposed sec: 4875.323652, Memory Pages Output sec: 2893.621353, Memory Page Reads sec: 1670.307176, Memory Demand Zero Faults sec: 320.6616451, Memory Available KBytes: 7668, Memory Pages sec: 9245.921876, Memory Cache Bytes: 376832, Memory Pool Nonpaged Bytes: 52699136, Memory Page Faults sec: 4297.866029, Memory Transition Faults sec: 2309.497167, Memory System Cache Resident Bytes: 376832, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 238.6629292, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 487424, Memory System Driver Resident Bytes: 1302528, Memory Standby Cache Normal Priority Bytes: 7364608, Memory Pool Paged Allocs: 59037, Memory Pool Nonpaged Allocs: 51701, Memory pct_ Committed Bytes In Use: 86.89655854, Memory Free System Page Table Entries: 33562140, Memory Available MBytes: 7, Memory Modified Page List Bytes: 1933312, Memory Cache Faults sec: 0.533324981, Memory Committed Bytes: 2521673728, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 6352.300523, Memory Pool Paged Resident Bytes: 11546624, Memory Write Copies sec: 0

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 62947, dst_ip: 192.168.1.250, dst_port: 27715, proto: tcp, service: -, duration: 0.453535, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 2076, MINFLT: 0, MAJFLT: 0, VSTEXT: 217, VSIZE: 294.6, RSIZE: 1652, VGROW: 0, RGROW: 88, MEM: 0, CMD: colord

[Assistant] normal


[User] PID: 2633, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 1, Status: 0, EXC: 0, State: S, CPU: 0.02, CMD: unity-panel-se

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:51, current_temperature: 30.85869836, thermostat_status: 1

[Assistant] normal


[User] PID: 4133, RDDSK: 0, WRDSK: 16, WCANCL: 0, DSK: 0.01, CMD: atop, attack: 1

[Assistant] attack


[User] date: 31-Mar-19, time: 12:43:57, latitude: 1.573711636, longitude: 11.87576302

[Assistant] normal


[User] Processor(_Total) DPC Rate: 22, Processor(_Total) pct_ Idle Time: 71.76616088, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 2.083197703, Processor(_Total) pct_ C1 Time: 66.6623265, Processor(_Total) pct_ Processor Time: 28.23383912, Processor(_Total) C1 Transitions sec: 3639.504675, Processor(_Total) pct_ DPC Time: 0.312479655, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 25.93581141, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 3721.966161, Processor(_Total) Interrupts sec: 5038.616774, Process(_Total) Pool Paged Bytes: 7777912, Process(_Total) IO Read Operations sec: 128.9918959, Process(_Total) Working Set - Private: 798117888, Process(_Total) Working Set Peak: 1999794176, Process(_Total) IO Write Operations sec: 128.725246, Process(_Total) Page File Bytes: 2231705600, Process(_Total) pct_ User Time: 2.083197703, Process(_Total) Virtual Bytes Peak: 7872454656, Process(_Total) Page File Bytes Peak: 2562404352, Process(_Total) IO Other Bytes sec: 4726.769699, Process(_Total) Private Bytes: 2231705600, Process(_Total) IO Write Bytes sec: 33078.52179, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6825578496, Process(_Total) pct_ Processor Time: 99.47269033, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1324488, Process(_Total) Working Set: 852283392, Process(_Total) Page Faults sec: 4094.609416, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 238.8516604, Process(_Total) IO Data Operations sec: 257.7171418, Process(_Total) Thread Count: 540, Process(_Total) pct_ Privileged Time: 97.38949263, Process(_Total) IO Data Bytes sec: 60226.14953, Process(_Total) IO Read Bytes sec: 27147.62774, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13329, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 165.4562716, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 77.59512496, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 243.0513966, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 1.066599656, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 1.933211876, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 2.999811532, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 1.066599656, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 1.933211876, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 91025408, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 987136, Memory Available Bytes: 12959744, Memory Commit Limit: 2885148672, Memory Transition Pages RePurposed sec: 6491.592155, Memory Pages Output sec: 5846.232701, Memory Page Reads sec: 2605.836284, Memory Demand Zero Faults sec: 969.0057873, Memory Available KBytes: 12656, Memory Pages sec: 13307.43061, Memory Cache Bytes: 462848, Memory Pool Nonpaged Bytes: 52768768, Memory Page Faults sec: 4343.127136, Memory Transition Faults sec: 769.9516265, Memory System Cache Resident Bytes: 462848, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 1120.529601, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 196608, Memory System Driver Resident Bytes: 1404928, Memory Standby Cache Normal Priority Bytes: 12763136, Memory Pool Paged Allocs: 58616, Memory Pool Nonpaged Allocs: 51114, Memory pct_ Committed Bytes In Use: 89.55708692, Memory Free System Page Table Entries: 33562140, Memory Available MBytes: 12, Memory Modified Page List Bytes: 20480, Memory Cache Faults sec: 1.799886919, Memory Committed Bytes: 2583855104, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 7461.197904, Memory Pool Paged Resident Bytes: 13045760, Memory Write Copies sec: 0.066662478

[Assistant] normal


[User] PID: 3294, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 2, Status: 0, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 49038, dst_ip: 101.119.11.17, dst_port: 80, proto: tcp, service: http, duration: 293.475201, src_bytes: 2304, dst_bytes: 3072, conn_state: SF, missed_bytes: 0, src_pkts: 48, src_ip_bytes: 5096, dst_pkts: 38, dst_ip_bytes: 5056, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.33, src_port: 45715, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 127, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 25-Apr-19, time:  09:15:50 , FC1_Read_Input_Register: 7251, FC2_Read_Discrete_Value: 47657, FC3_Read_Holding_Register: 51797, FC4_Read_Coil: 18344

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 54804, dst_ip: 192.168.1.49, dst_port: 7435, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 172.17.0.7, src_port: 56062, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000809, src_bytes: 0, dst_bytes: 178, conn_state: SHR, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 2, dst_ip_bytes: 234, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 1482, MINFLT: 0, MAJFLT: 0, VSTEXT: 531, VSIZE: 392.3, RSIZE: 21772, VGROW: 0, RGROW: 0, MEM: 0.01, CMD: named

[Assistant] normal


[User] date: 31-Mar-19, time:    12:40:51   , fridge_temperature: 1, temp_condition: low

[Assistant] normal


[User] date: 27-Apr-19, time:  05:35:42 , latitude: 20.71948345, longitude: 30.41972585

[Assistant] attack


[User] PID: 4479, MINFLT: 0, MAJFLT: 0, VSTEXT: 0, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: kworker/u256:1

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 62955, dst_ip: 192.168.1.133, dst_port: 1455, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time:    12:39:17   , fridge_temperature: 2.75, temp_condition: low

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:30, latitude: 1.983966892, longitude: 11.43475476

[Assistant] normal


[User] src_ip: 192.168.1.33, src_port: 45131, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 1500, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 41547, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000055, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.34, src_port: 52776, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.014039, src_bytes: 86, dst_bytes: 216, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 142, dst_pkts: 2, dst_ip_bytes: 272, dns_query: tpc.googlesyndication.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3390, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: ostinato, attack: 1

[Assistant] attack


[User] date: 28-Apr-19, time:  17:14:24 , current_temperature: 32.42490182, thermostat_status: 1

[Assistant] attack


[User] Processor(_Total) DPC Rate: 7, Processor(_Total) pct_ Idle Time: 73.54166667, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0.104166667, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 1.25, Processor(_Total) pct_ C1 Time: 73.33333333, Processor(_Total) pct_ Processor Time: 26.45833333, Processor(_Total) C1 Transitions sec: 2983.282279, Processor(_Total) pct_ DPC Time: 0.208333333, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 25.20833333, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 2927.816562, Processor(_Total) Interrupts sec: 4320.39273, Process(_Total) Pool Paged Bytes: 7465112, Process(_Total) IO Read Operations sec: 127.1978232, Process(_Total) Working Set - Private: 749850624, Process(_Total) Working Set Peak: 1985679360, Process(_Total) IO Write Operations sec: 127.8644785, Process(_Total) Page File Bytes: 2167963648, Process(_Total) pct_ User Time: 1.25, Process(_Total) Virtual Bytes Peak: 7662981120, Process(_Total) Page File Bytes Peak: 2525609984, Process(_Total) IO Other Bytes sec: 2193.962454, Process(_Total) Private Bytes: 2167963648, Process(_Total) IO Write Bytes sec: 33666.75718, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6594043904, Process(_Total) pct_ Processor Time: 99.27083333, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1240144, Process(_Total) Working Set: 819445760, Process(_Total) Page Faults sec: 5031.313897, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 112.1314144, Process(_Total) IO Data Operations sec: 255.0623017, Process(_Total) Thread Count: 540, Process(_Total) pct_ Privileged Time: 98.02083333, Process(_Total) IO Data Bytes sec: 64693.15955, Process(_Total) IO Read Bytes sec: 31026.40237, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13101, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 111.3314281, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 57.33235219, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 168.6637803, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 0.266662103, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 1.333310516, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 1.599972619, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 0.266662103, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 1.333310516, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 90972160, Memory Free & Zero Page List Bytes: 184320, Memory Cache Bytes Peak: 61227008, Memory System Code Resident Bytes: 1249280, Memory Available Bytes: 37625856, Memory Commit Limit: 2818039808, Memory Transition Pages RePurposed sec: 6931.948038, Memory Pages Output sec: 5582.371134, Memory Page Reads sec: 2523.556814, Memory Demand Zero Faults sec: 287.1284196, Memory Available KBytes: 36744, Memory Pages sec: 13441.23664, Memory Cache Bytes: 417792, Memory Pool Nonpaged Bytes: 52965376, Memory Page Faults sec: 5397.907624, Memory Transition Faults sec: 2613.75527, Memory System Cache Resident Bytes: 417792, Memory Standby Cache Reserve Bytes: 36864, Memory Page Writes sec: 561.8570514, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 528384, Memory System Driver Resident Bytes: 1687552, Memory Standby Cache Normal Priority Bytes: 36876288, Memory Pool Paged Allocs: 58672, Memory Pool Nonpaged Allocs: 50813, Memory pct_ Committed Bytes In Use: 89.22584077, Memory Free System Page Table Entries: 33560927, Memory Available MBytes: 35, Memory Modified Page List Bytes: 40960, Memory Cache Faults sec: 4.533255754, Memory Committed Bytes: 2514419712, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 7858.865509, Memory Pool Paged Resident Bytes: 16023552, Memory Write Copies sec: 10.39982202

[Assistant] normal


[User] PID: 1547, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: named, attack: 1

[Assistant] attack


[User] date: 2-Apr-19, time:  04:06:13 , current_temperature: 29.21216529, thermostat_status: 1

[Assistant] normal


[User] PID: 4790, MINFLT: 311, MAJFLT: 0, VSTEXT: 0, VSIZE: 0, RSIZE: 0, VGROW: 0, RGROW: 0, MEM: 0, CMD: <groups>

[Assistant] attack


[User] PID: 1851, TRUN: 0, TSLPI: 2, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: vmtoolsd

[Assistant] normal


[User] PID: 11035, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] PID: 53046, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: N, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 50947, dst_ip: 192.168.1.49, dst_port: 1494, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:    04:07:04   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] PID: 3793, MINFLT: 12, MAJFLT: 0, VSTEXT: 978, VSIZE: 2.9, RSIZE: 17472, VGROW: 0, RGROW: 0, MEM: 0, CMD: drone

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 60965, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.022259, src_bytes: 84, dst_bytes: 424, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 140, dst_pkts: 2, dst_ip_bytes: 480, dns_query: detectportal.firefox.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.34, src_port: 51206, dst_ip: 173.194.221.94, dst_port: 443, proto: tcp, service: ssl, duration: 6.53132, src_bytes: 2492, dst_bytes: 4118, conn_state: SF, missed_bytes: 0, src_pkts: 20, src_ip_bytes: 3540, dst_pkts: 19, dst_ip_bytes: 5122, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.79, src_port: 54595, dst_ip: 192.168.1.255, dst_port: 15600, proto: udp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 63, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 3029, TRUN: 1, TSLPI: 0, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 4, Status: -, EXC: 0, State: R, CPU: 0.01, CMD: atop

[Assistant] attack


[User] src_ip: 192.168.1.30, src_port: 39798, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 3.102516, src_bytes: 238, dst_bytes: 1951, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 458, dst_pkts: 6, dst_ip_bytes: 2203, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 1-Apr-19, time:  20:47:23 , motion_status: 0, light_status:  off

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 57938, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 0.237513, src_bytes: 304, dst_bytes: 524, conn_state: SF, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 564, dst_pkts: 4, dst_ip_bytes: 696, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 2-Apr-19, time:  04:06:13 , current_temperature: 26.84325184, thermostat_status: 1

[Assistant] normal


[User] PID: 2845, TRUN: 0, TSLPI: 5, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: udisksd

[Assistant] normal


[User] src_ip: 192.168.1.195, src_port: 51577, dst_ip: 192.168.1.1, dst_port: 41952, proto: tcp, service: http, duration: 5.035913, src_bytes: 383, dst_bytes: 3882, conn_state: SF, missed_bytes: 0, src_pkts: 13, src_ip_bytes: 1303, dst_pkts: 16, dst_ip_bytes: 4570, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 53039, dst_ip: 192.168.1.49, dst_port: 903, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 1-Apr-19, time:   20:39:59   , fridge_temperature: 6.4, temp_condition: high

[Assistant] normal


[User] date: 2-Apr-19, time:    04:06:58   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] Processor(_Total) DPC Rate: 33, Processor(_Total) pct_ Idle Time: 74.79166667, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 1.979166667, Processor(_Total) pct_ C1 Time: 73.33333333, Processor(_Total) pct_ Processor Time: 25.20833333, Processor(_Total) C1 Transitions sec: 2567.900255, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 23.22916667, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 2404.43145, Processor(_Total) Interrupts sec: 3585.846903, Process(_Total) Pool Paged Bytes: 7984336, Process(_Total) IO Read Operations sec: 10.40013603, Process(_Total) Working Set - Private: 734408704, Process(_Total) Working Set Peak: 2035953664, Process(_Total) IO Write Operations sec: 4.466725091, Process(_Total) Page File Bytes: 1862275072, Process(_Total) pct_ User Time: 1.979166667, Process(_Total) Virtual Bytes Peak: 8023887872, Process(_Total) Page File Bytes Peak: 2253840384, Process(_Total) IO Other Bytes sec: 10081.73187, Process(_Total) Private Bytes: 1862275072, Process(_Total) IO Write Bytes sec: 7858.502789, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6848008192, Process(_Total) pct_ Processor Time: 100, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1065252, Process(_Total) Working Set: 789241856, Process(_Total) Page Faults sec: 5088.333222, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 509.3399955, Process(_Total) IO Data Operations sec: 14.86686113, Process(_Total) Thread Count: 559, Process(_Total) pct_ Privileged Time: 98.02083333, Process(_Total) IO Data Bytes sec: 10074.39844, Process(_Total) IO Read Bytes sec: 2215.895651, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 14088, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 2796.63658, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 196.535904, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 2993.172484, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 3.266709395, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 6.133413558, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 9.400122954, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 3.266709395, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 6.133413558, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 98246656, Memory Free & Zero Page List Bytes: 0, Memory Cache Bytes Peak: 80883712, Memory System Code Resident Bytes: 716800, Memory Available Bytes: 24875008, Memory Commit Limit: 2517131264, Memory Transition Pages RePurposed sec: 5166.800915, Memory Pages Output sec: 2404.96479, Memory Page Reads sec: 2128.894513, Memory Demand Zero Faults sec: 1119.214639, Memory Available KBytes: 24292, Memory Pages sec: 8422.376831, Memory Cache Bytes: 417792, Memory Pool Nonpaged Bytes: 56782848, Memory Page Faults sec: 5281.802419, Memory Transition Faults sec: 2035.359956, Memory System Cache Resident Bytes: 417792, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 300.6039319, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 21528576, Memory System Driver Resident Bytes: 1138688, Memory Standby Cache Normal Priority Bytes: 3346432, Memory Pool Paged Allocs: 63162, Memory Pool Nonpaged Allocs: 54033, Memory pct_ Committed Bytes In Use: 88.71990809, Memory Free System Page Table Entries: 33563833, Memory Available MBytes: 23, Memory Modified Page List Bytes: 73728, Memory Cache Faults sec: 0.733342925, Memory Committed Bytes: 2233196544, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 6017.412041, Memory Pool Paged Resident Bytes: 11026432, Memory Write Copies sec: 0

[Assistant] normal


[User] PID: 3257, TRUN: 0, TSLPI: 22, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0.1, CMD: Web-Content

[Assistant] normal


[User] date: 1-Apr-19, time:  19:07:54 , current_temperature: 26.26889937, thermostat_status: 1

[Assistant] normal


[User] PID: 3675, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 20, PRI: 100, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0.01, CMD: atop

[Assistant] normal


[User] src_ip: 172.17.0.7, src_port: 47323, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000702, src_bytes: 0, dst_bytes: 178, conn_state: SHR, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 2, dst_ip_bytes: 234, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 4005, TRUN: 0, TSLPI: 0, TSLPU: 0, POLI: 0, NICE: 0, PRI: 0, RTPR: 0, CPUNR: 0, Status: NE, EXC: 0, State: E, CPU: 0, CMD: <systemd-udev>

[Assistant] attack


[User] PID: 3257, TRUN: 0, TSLPI: 22, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0.1, CMD: Web-Content

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 47, dst_ip: 192.168.1.193, dst_port: 47, proto: tcp, service: -, duration: 0.000005, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] Processor(_Total) DPC Rate: 16, Processor(_Total) pct_ Idle Time: 70.62959799, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 2.500162761, Processor(_Total) pct_ C1 Time: 73.33810764, Processor(_Total) pct_ Processor Time: 29.37040201, Processor(_Total) C1 Transitions sec: 2968.457019, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 26.87674968, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 2959.456644, Processor(_Total) Interrupts sec: 4165.906913, Process(_Total) Pool Paged Bytes: 7825472, Process(_Total) IO Read Operations sec: 10.93378891, Process(_Total) Working Set - Private: 719646720, Process(_Total) Working Set Peak: 2054631424, Process(_Total) IO Write Operations sec: 9.467061128, Process(_Total) Page File Bytes: 1849180160, Process(_Total) pct_ User Time: 2.500162761, Process(_Total) Virtual Bytes Peak: 7949701120, Process(_Total) Page File Bytes Peak: 2252435456, Process(_Total) IO Other Bytes sec: 8564.756865, Process(_Total) Private Bytes: 1849180160, Process(_Total) IO Write Bytes sec: 11393.67474, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 6758211584, Process(_Total) pct_ Processor Time: 100.0065104, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 1024744, Process(_Total) Working Set: 776245248, Process(_Total) Page Faults sec: 5654.702279, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 385.7494062, Process(_Total) IO Data Operations sec: 20.40085004, Process(_Total) Thread Count: 545, Process(_Total) pct_ Privileged Time: 97.50634766, Process(_Total) IO Data Bytes sec: 17172.71553, Process(_Total) IO Read Bytes sec: 5779.040793, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13841, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 4751.464644, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 125.3385558, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 4876.8032, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 1.800075003, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 5.066877787, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 6.86695279, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 1.800075003, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 5.066877787, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 97984512, Memory Free & Zero Page List Bytes: 32768, Memory Cache Bytes Peak: 80883712, Memory System Code Resident Bytes: 720896, Memory Available Bytes: 39337984, Memory Commit Limit: 2517131264, Memory Transition Pages RePurposed sec: 6423.934331, Memory Pages Output sec: 3838.093254, Memory Page Reads sec: 2667.377807, Memory Demand Zero Faults sec: 419.0174591, Memory Available KBytes: 38416, Memory Pages sec: 11760.15667, Memory Cache Bytes: 348160, Memory Pool Nonpaged Bytes: 56795136, Memory Page Faults sec: 5812.775532, Memory Transition Faults sec: 2726.113588, Memory System Cache Resident Bytes: 348160, Memory Standby Cache Reserve Bytes: 0, Memory Page Writes sec: 314.8797867, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 25645056, Memory System Driver Resident Bytes: 1314816, Memory Standby Cache Normal Priority Bytes: 13660160, Memory Pool Paged Allocs: 64008, Memory Pool Nonpaged Allocs: 54585, Memory pct_ Committed Bytes In Use: 87.72240429, Memory Free System Page Table Entries: 33563833, Memory Available MBytes: 37, Memory Modified Page List Bytes: 61440, Memory Cache Faults sec: 0.800033335, Memory Committed Bytes: 2208088064, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 7922.063419, Memory Pool Paged Resident Bytes: 10399744, Memory Write Copies sec: 0

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49478, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000089, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.33, src_port: 44583, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 1500, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] src_ip: 192.168.1.31, src_port: 53611, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.002523, src_bytes: 23, dst_bytes: 23, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 51, dst_pkts: 1, dst_ip_bytes: 51, dns_query: local, dns_qclass: 1, dns_qtype: 6, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: T, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 26-Apr-19, time:  15:50:46 , temperature: 21.7596906, pressure: 5.83579853, humidity: 4.704599812

[Assistant] attack


[User] src_ip: 192.168.1.180, src_port: 56001, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.195107, src_bytes: 37, dst_bytes: 301, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 65, dst_pkts: 1, dst_ip_bytes: 329, dns_query: accounts.google.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 36524, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000051, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] date: 31-Mar-19, time: 12:43:47, current_temperature: 29.11960674, thermostat_status: 1

[Assistant] normal


[User] PID: 1026, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: upstart-socet, attack: 0

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 59730, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.191212, src_bytes: 302, dst_bytes: 1919, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 570, dst_pkts: 5, dst_ip_bytes: 2187, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] date: 31-Mar-19, time:    12:41:48   , door_state: open, sphone_signal: true

[Assistant] normal


[User] date: 2-Apr-19, time:    04:04:58   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] PID: 1133, TRUN: 0, TSLPI: 3, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: polkitd

[Assistant] normal


[User] date: 2-Apr-19, time:    04:05:55   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] date: 31-Mar-19, time: 12:41:24, FC1_Read_Input_Register: 7812, FC2_Read_Discrete_Value: 24871, FC3_Read_Holding_Register: 46767, FC4_Read_Coil: 50785

[Assistant] normal


[User] date: 28-Apr-19, time:  08:28:22 , fridge_temperature: 9.4, temp_condition: high

[Assistant] attack


[User] date: 28-Apr-19, time:  09:11:47 , latitude: 68.16317247, longitude: 82.89460935

[Assistant] attack


[User] PID: 2906, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: compiz, attack: 1

[Assistant] attack


[User] PID: 2938, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: nautilus, attack: 1

[Assistant] attack


[User] date: 1-Apr-19, time:  20:28:40 , motion_status: 1, light_status:  on

[Assistant] normal


[User] date: 28-Apr-19, time:  10:28:19 , FC1_Read_Input_Register: 10315, FC2_Read_Discrete_Value: 24370, FC3_Read_Holding_Register: 51391, FC4_Read_Coil: 37087

[Assistant] attack


[User] date: 31-Mar-19, time: 12:42:16, temperature: 49.20277703, pressure: 1.035, humidity: 3.931329482

[Assistant] normal


[User] PID: 4064, RDDSK: 0, WRDSK: 8, WCANCL: 0, DSK: 0, CMD: atop, attack: 1

[Assistant] attack


[User] date: 31-Mar-19, time: 12:41:45, temperature: 25.18987055, pressure: 0.407896827, humidity: 9.490035534

[Assistant] normal


[User] date: 28-Apr-19, time:  05:22:54 , fridge_temperature: 4.95, temp_condition: low

[Assistant] attack


[User] PID: 7914, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: systemd-udevd, attack: 0

[Assistant] normal


[User] PID: 3677, MINFLT: 2075, MAJFLT: 0, VSTEXT: 148, VSIZE: 17948, RSIZE: 2612, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 63.40131557, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0.07812895, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 32.34538538, Processor_pct_ C1_Time: 63.40131557, Processor_pct_ Processor_Time: 34.44981078, Processor_C1_ransitions_sec: 311.5168811, Processor_pct_ DPC_Time: 0, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 2.109481655, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 91.90498033, Processor_Interrupts_sec: 911.9494185, Process_Pool_Paged Bytes: 24538192, Process_IO Read_Operations_sec: 0, Process_Working_Set_ Private: 1787912192, Process_Working_Set_Peak: 5859950592, Process_IO_Write Operations_sec: 0.100005419, Process_Page_File Bytes: 3846705152, Process_pct_ User_Time: 64.69077077, Process_Virtual_Bytes Peak: 1.57E+14, Process_Page_File Bytes Peak: 4878020608, Process_IO_Other_Bytes_sec: 3506.089995, Process_Private_Bytes: 3846705152, Process_IO_Write_Bytes_sec: 6553.955159, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.57E+14, Process_pct_ Processor_Time: 199.8538546, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2730392, Process_Working Set: 1866166272, Process_Page Faults_sec: 2539.637623, Process_ID Process: 0, Process_IO Other Operations_sec: 49.70269339, Process_IO Data Operations_sec: 0.100005419, Process_Thread Count: 1011, Process_pct_ Privileged_Time: 135.1630838, Process_IO Data Bytes_sec: 6553.955159, Process_IO Read Bytes_sec: 0, Process_Priority Base: 0, Process_Handle Count: 39540, Network_I(Intel R _82574L_GNC)TCP_APS: 5763, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 4853.463009, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 260.7141281, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5114.177137, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 4.500243868, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 6.800368512, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 11.30061238, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 1, Network_I(Intel R _82574L_GNC) Packets Sent sec: 4.500243868, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 6.800368512, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 105418752, Memory Free & Zero Page List Bytes: 8593408, Memory Cache Bytes Peak: 123113472, Memory System Code Resident Bytes: 0, Memory Available Bytes: 545476608, Memory Commit Limit: 5674004480, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 1079.858518, Memory Page Reads sec: 2.300124644, Memory Demand Zero Faults sec: 997.454052, Memory Available KBytes: 532692, Memory Pages sec: 1104.559856, Memory Cache Bytes: 1134592, Memory Pool Nonpaged Bytes: 98844672, Memory Page Faults sec: 2583.039975, Memory Transition Faults sec: 1543.583647, Memory System Cache Resident Bytes: 1134592, Memory Long-Term Average Standby Cache Lifetime (s): 103, Memory Standby Cache Reserve Bytes: 178282496, Memory Page Writes sec: 67.9036797, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 226918400, Memory System Driver Resident Bytes: 1.76E+13, Memory Standby Cache Normal Priority Bytes: 131682304, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 84.37782211, Memory Free System Page Table Entries: 12209253, Memory Available MBytes: 520, Memory Modified Page List Bytes: 7442432, Memory Cache Faults sec: 0, Memory Committed Bytes: 4787601408, Memory System Driver Total Bytes: 18178048, Memory Pages Input sec: 24.70133857, Memory Pool Paged Resident Bytes: 26763264, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 64811.4152, LogicalDisk(_Total) pct_ Idle Time: 99.54167983, LogicalDisk(_Total) Disk Reads sec: 2.300124644, LogicalDisk(_Total) pct_ Free Space: 82.67493392, LogicalDisk(_Total) Disk Read Bytes sec: 101176.6828, LogicalDisk(_Total) Avg  Disk sec Read: 0.001856287, LogicalDisk(_Total) Disk Writes sec: 68.4037068, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 169205, LogicalDisk(_Total) Avg  Disk sec Write: 0.000257861, LogicalDisk(_Total) Disk Bytes sec: 4534517.726, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.004269676, LogicalDisk(_Total) pct_ Disk Time: 0.730274923, LogicalDisk(_Total) Avg  Disk Bytes Read: 43987.47826, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.017638572, LogicalDisk(_Total) Avg  Disk Queue Length: 0.021908248, LogicalDisk(_Total) pct_ Disk Read Time: 0.142323196, LogicalDisk(_Total) Disk Write Bytes sec: 4433341.043, LogicalDisk(_Total) Disk Transfers sec: 70.70383144, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 64133.97454, LogicalDisk(_Total) pct_ Disk Write Time: 0.587952727, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000309861

[Assistant] normal


[User] PID: 1851, TRUN: 0, TSLPI: 2, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: S, CPU: 0, CMD: vmtoolsd

[Assistant] normal


[User] PID: 3893, TRUN: 0, TSLPI: 1, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 0, Status: -, EXC: 0, State: S, CPU: 0, CMD: apache2

[Assistant] attack


[User] src_ip: 2405:6e00:10ce:2c00:20c:29ff:feee:e07a, src_port: 17755, dst_ip: 2001:503:a83e::2:30, dst_port: 53, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 89, dst_pkts: 0, dst_ip_bytes: 0, dns_query: msftncsi.com, dns_qclass: 1, dns_qtype: 43, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] PID: 3676, MINFLT: 2073, MAJFLT: 0, VSTEXT: 148, VSIZE: 18016, RSIZE: 2580, VGROW: 0, RGROW: 0, MEM: 0, CMD: atop

[Assistant] normal


[User] PID: 2119, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 0

[Assistant] normal


[User] Processor_DPC_Rate: 0, Processor_pct_ Idle_Time: 58.99845854, Processor_pct_ C3_Time: 0, Processor_pct_ Interrupt_Time: 0, Processor_pct_ C2_Time: 0, Processor_pct_ User_Time: 31.79678152, Processor_pct_ C1_Time: 58.99845854, Processor_pct_ Processor_Time: 39.45330301, Processor_C1_ransitions_sec: 421.6575777, Processor_pct_ DPC_Time: 0.07812477, Processor_C2_ransitions_sec: 0, Processor_pct_ Privileged_Time: 7.656227491, Processor_C3_ransitions_sec: 0, Processor_DPCs_Queued_sec: 200.3748821, Processor_Interrupts_sec: 2098.184112, Process_Pool_Paged Bytes: 22520328, Process_IO Read_Operations_sec: 3.601345859, Process_Working_Set_ Private: 2163068928, Process_Working_Set_Peak: 6343217152, Process_IO_Write Operations_sec: 0, Process_Page_File Bytes: 4068995072, Process_pct_ User_Time: 63.59356303, Process_Virtual_Bytes Peak: 1.55E+14, Process_Page_File Bytes Peak: 5178281984, Process_IO_Other_Bytes_sec: 5575.583651, Process_Private_Bytes: 4068995072, Process_IO_Write_Bytes_sec: 0, Process_Elapsed_Time: 0, Process_Virtual_Bytes: 1.55E+14, Process_pct_ Processor_Time: 199.8431625, Process_Creating Process ID: 0, Process_Pool Nonpaged Bytes: 2724976, Process_Working Set: 2227646464, Process_Page Faults_sec: 3644.562009, Process_ID Process: 0, Process_IO Other Operations_sec: 94.5353288, Process_IO Data Operations_sec: 3.601345859, Process_Thread Count: 1051, Process_pct_ Privileged_Time: 136.2495994, Process_IO Data Bytes_sec: 925.345811, Process_IO Read Bytes_sec: 925.345811, Process_Priority Base: 0, Process_Handle Count: 40274, Network_I(Intel R _82574L_GNC)TCP_APS: 5569, Network_I(Intel R _82574L_GNC) Packets Received Unknown: 0, Network_I(Intel R _82574L_GNC) Bytes Received sec: 5016.674782, Network_I(Intel R _82574L_GNC) Bytes Sent sec: 259.0968271, Network_I(Intel R _82574L_GNC) Packets Outbound Errors: 0, Network_I(Intel R _82574L_GNC) Packets Received Discarded: 0, Network_I(Intel R _82574L_GNC) Bytes Total sec: 5275.771609, Network_I(Intel R _82574L_GNC) Packets Outbound Discarded: 0, Network_I(Intel R _82574L_GNC) TCP RSC Exceptions sec: 0, Network_I(Intel R _82574L_GNC) Packets Sent Unicast sec: 4.701757094, Network_I(Intel R _82574L_GNC) Output Queue Length: 0, Network_I(Intel R _82574L_GNC) Packets Received sec: 8.203065568, Network_I(Intel R _82574L_GNC) Current Bandwidth: 1000000000, Network_I(Intel R _82574L_GNC) Packets sec: 12.90482266, Network_I(Intel R _82574L_GNC) TCP Active RSC Connections: 1, Network_I(Intel R _82574L_GNC) Packets Sent sec: 4.701757094, Network_I(Intel R _82574L_GNC) Packets Received Unicast sec: 8.203065568, Network_I(Intel R _82574L_GNC) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) Packets Received Non-Unicast sec: 0, Network_I(Intel R _82574L_GNC) TCP RSC Coalesced Packets sec: 0, Network_I(Intel R _82574L_GNC) Offloaded Connections: 0, Network_I(Intel R _82574L_GNC) Packets Received Errors: 0, Memory Pool Paged Bytes: 139915264, Memory Free & Zero Page List Bytes: 4202496, Memory Cache Bytes Peak: 157425664, Memory System Code Resident Bytes: 0, Memory Available Bytes: 220606464, Memory Commit Limit: 8459431936, Memory Transition Pages RePurposed sec: 0, Memory Pages Output sec: 73.02729103, Memory Page Reads sec: 194.6727512, Memory Demand Zero Faults sec: 1693.53289, Memory Available KBytes: 215436, Memory Pages sec: 1138.525478, Memory Cache Bytes: 1048576, Memory Pool Nonpaged Bytes: 118419456, Memory Page Faults sec: 4164.556336, Memory Transition Faults sec: 1533.072925, Memory System Cache Resident Bytes: 1048576, Memory Long-Term Average Standby Cache Lifetime (s): 58, Memory Standby Cache Reserve Bytes: 59039744, Memory Page Writes sec: 4.201570169, Memory System Code Total Bytes: 0, Memory Standby Cache Core Bytes: 134832128, Memory System Driver Resident Bytes: 1.76E+13, Memory Standby Cache Normal Priority Bytes: 22532096, Memory Pool Paged Allocs: 0, Memory Pool Nonpaged Allocs: 0, Memory pct_ Committed Bytes In Use: 59.05768242, Memory Free System Page Table Entries: 12213564, Memory Available MBytes: 210, Memory Modified Page List Bytes: 1720320, Memory Cache Faults sec: 1.800672929, Memory Committed Bytes: 4995944448, Memory System Driver Total Bytes: 18264064, Memory Pages Input sec: 1065.498187, Memory Pool Paged Resident Bytes: 25731072, Memory Write Copies sec: 0, LogicalDisk(_Total) Avg  Disk Bytes Write: 66901.33333, LogicalDisk(_Total) pct_ Idle Time: 98.31321496, LogicalDisk(_Total) Disk Reads sec: 192.7720408, LogicalDisk(_Total) pct_ Free Space: 81.02099549, LogicalDisk(_Total) Disk Read Bytes sec: 4367814.696, LogicalDisk(_Total) Avg  Disk sec Read: 0.00033069, LogicalDisk(_Total) Disk Writes sec: 4.501682324, LogicalDisk(_Total) Current Disk Queue Length: 0, LogicalDisk(_Total) Split IO Sec: 0, LogicalDisk(_Total) Free Megabytes: 165820, LogicalDisk(_Total) Avg  Disk sec Write: 0.000286158, LogicalDisk(_Total) Disk Bytes sec: 4668983.246, LogicalDisk(_Total) Avg  Disk Read Queue Length: 0.063723803, LogicalDisk(_Total) pct_ Disk Time: 2.167050629, LogicalDisk(_Total) Avg  Disk Bytes Read: 22657.92631, LogicalDisk(_Total) Avg  Disk Write Queue Length: 0.001287706, LogicalDisk(_Total) Avg  Disk Queue Length: 0.065011509, LogicalDisk(_Total) pct_ Disk Read Time: 2.124126755, LogicalDisk(_Total) Disk Write Bytes sec: 301168.5497, LogicalDisk(_Total) Disk Transfers sec: 197.2737232, LogicalDisk(_Total) Avg  Disk Bytes Transfer: 23667.53753, LogicalDisk(_Total) pct_ Disk Write Time: 0.042922874, LogicalDisk(_Total) Avg  Disk sec Transfer: 0.000329674

[Assistant] normal


[User] Processor(_Total) DPC Rate: 1, Processor(_Total) pct_ Idle Time: 80.9375, Processor(_Total) pct_ C3 Time: 0, Processor(_Total) pct_ Interrupt Time: 0, Processor(_Total) pct_ C2 Time: 0, Processor(_Total) pct_ User Time: 16.97916667, Processor(_Total) pct_ C1 Time: 80, Processor(_Total) pct_ Processor Time: 19.0625, Processor(_Total) C1 Transitions sec: 834.3205794, Processor(_Total) pct_ DPC Time: 0, Processor(_Total) C2 Transitions sec: 0, Processor(_Total) pct_ Privileged Time: 2.083333333, Processor(_Total) C3 Transitions sec: 0, Processor(_Total) DPCs Queued sec: 50.19923262, Processor(_Total) Interrupts sec: 1105.583099, Process(_Total) Pool Paged Bytes: 7878264, Process(_Total) IO Read Operations sec: 91.73193106, Process(_Total) Working Set - Private: 432660480, Process(_Total) Working Set Peak: 1599287296, Process(_Total) IO Write Operations sec: 81.86541522, Process(_Total) Page File Bytes: 1081589760, Process(_Total) pct_ User Time: 16.97916667, Process(_Total) Virtual Bytes Peak: 7056580608, Process(_Total) Page File Bytes Peak: 1366462464, Process(_Total) IO Other Bytes sec: 2446.029275, Process(_Total) Private Bytes: 1081589760, Process(_Total) IO Write Bytes sec: 84378.31014, Process(_Total) Elapsed Time: 0, Process(_Total) Virtual Bytes: 5957152768, Process(_Total) pct_ Processor Time: 100, Process(_Total) Creating Process ID: 0, Process(_Total) Pool Nonpaged Bytes: 945192, Process(_Total) Working Set: 584548352, Process(_Total) Page Faults sec: 530.9252173, Process(_Total) ID Process: 0, Process(_Total) IO Other Operations sec: 115.8648955, Process(_Total) IO Data Operations sec: 173.5973463, Process(_Total) Thread Count: 533, Process(_Total) pct_ Privileged Time: 83.02083333, Process(_Total) IO Data Bytes sec: 168852.6188, Process(_Total) IO Read Bytes sec: 84474.30867, Process(_Total) Priority Base: 0, Process(_Total) Handle Count: 13728, Network_I(6TO4 Adapter) Packets Received Unknown: 0, Network_I(isatap{B4D100D3-}) Packets Received Unknown: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unknown: 0, Network_I(6TO4 Adapter) Bytes Received sec: 0, Network_I(isatap{B4D100D3-}) Bytes Received sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Received sec: 2356.030651, Network_I(6TO4 Adapter) Bytes Sent sec: 0, Network_I(isatap{B4D100D3-}) Bytes Sent sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Sent sec: 247.2628868, Network_I(6TO4 Adapter) Packets Outbound Errors: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Errors: 0, Network_I(6TO4 Adapter) Packets Received Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Received Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Received Discarded: 0, Network_I(6TO4 Adapter) Bytes Total sec: 0, Network_I(isatap{B4D100D3-}) Bytes Total sec: 0, Network_I(Intel R _Pro_1000MT) Bytes Total sec: 2603.293538, Network_I(6TO4 Adapter) Packets Outbound Discarded: 0, Network_I(isatap{B4D100D3-}) Packets Outbound Discarded: 0, Network_I(Intel R _Pro_1000MT) Packets Outbound Discarded: 0, Network_I(6TO4 Adapter) Packets Sent Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Unicast sec: 3.466613674, Network_I(6TO4 Adapter) Output Queue Length: 0, Network_I(isatap{B4D100D3-}) Output Queue Length: 0, Network_I(Intel R _Pro_1000MT) Output Queue Length: 0, Network_I(6TO4 Adapter) Packets Received sec: 0, Network_I(isatap{B4D100D3-}) Packets Received sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received sec: 5.799911339, Network_I(6TO4 Adapter) Current Bandwidth: 100000, Network_I(isatap{B4D100D3-}) Current Bandwidth: 100000, Network_I(Intel R _Pro_1000MT) Current Bandwidth: 1000000000, Network_I(6TO4 Adapter) Packets sec: 0, Network_I(isatap{B4D100D3-}) Packets sec: 0, Network_I(Intel R _Pro_1000MT) Packets sec: 9.266525012, Network_I(6TO4 Adapter) Packets Sent sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent sec: 3.466613674, Network_I(6TO4 Adapter) Packets Received Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Unicast sec: 5.799911339, Network_I(6TO4 Adapter) Packets Sent Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Sent Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Sent Non-Unicast sec: 0, Network_I(6TO4 Adapter) Packets Received Non-Unicast sec: 0, Network_I(isatap{B4D100D3-}) Packets Received Non-Unicast sec: 0, Network_I(Intel R _Pro_1000MT) Packets Received Non-Unicast sec: 0, Network_I(6TO4 Adapter) Offloaded Connections: 0, Network_I(isatap{B4D100D3-}) Offloaded Connections: 0, Network_I(Intel R _Pro_1000MT) Offloaded Connections: 0, Network_I(6TO4 Adapter) Packets Received Errors: 0, Network_I(isatap{B4D100D3-}) Packets Received Errors: 0, Network_I(Intel R _Pro_1000MT) Packets Received Errors: 0, Memory Pool Paged Bytes: 100913152, Memory Free & Zero Page List Bytes: 6385664, Memory Cache Bytes Peak: 80883712, Memory System Code Resident Bytes: 1298432, Memory Available Bytes: 249667584, Memory Commit Limit: 2146951168, Memory Transition Pages RePurposed sec: 147.5977437, Memory Pages Output sec: 0, Memory Page Reads sec: 0.333328238, Memory Demand Zero Faults sec: 530.4585577, Memory Available KBytes: 243816, Memory Pages sec: 1.199981656, Memory Cache Bytes: 2777088, Memory Pool Nonpaged Bytes: 56913920, Memory Page Faults sec: 536.8584599, Memory Transition Faults sec: 5.999908281, Memory System Cache Resident Bytes: 2777088, Memory Standby Cache Reserve Bytes: 12288, Memory Page Writes sec: 0, Memory System Code Total Bytes: 7155712, Memory Standby Cache Core Bytes: 104820736, Memory System Driver Resident Bytes: 3133440, Memory Standby Cache Normal Priority Bytes: 138448896, Memory Pool Paged Allocs: 70782, Memory Pool Nonpaged Allocs: 56760, Memory pct_ Committed Bytes In Use: 67.99400181, Memory Free System Page Table Entries: 33562652, Memory Available MBytes: 238, Memory Modified Page List Bytes: 1175552, Memory Cache Faults sec: 0.533325181, Memory Committed Bytes: 1459798016, Memory System Driver Total Bytes: 5849088, Memory Pages Input sec: 1.199981656, Memory Pool Paged Resident Bytes: 32878592, Memory Write Copies sec: 0

[Assistant] normal


[User] PID: 1851, MINFLT: 0, MAJFLT: 0, VSTEXT: 36, VSIZE: 159.8, RSIZE: 2004, VGROW: 0, RGROW: 0, MEM: 0, CMD: vmtoolsd

[Assistant] normal


[User] PID: 11038, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: apache2, attack: 1

[Assistant] attack


[User] date: 31-Mar-19, time:    12:42:22   , door_state: closed, sphone_signal: false

[Assistant] normal


[User] date: 1-Apr-19, time:  20:54:44 , current_temperature: 30.4206654, thermostat_status: 1

[Assistant] normal


[User] PID: 1878, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: vmtoolsd, attack: 1

[Assistant] attack


[User] date: 26-Apr-19, time:  16:35:26 , current_temperature: 29.489295, thermostat_status: 1

[Assistant] attack


[User] src_ip: 192.168.1.152, src_port: 37889, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000036, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 49100, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 13.947021, src_bytes: 1756, dst_bytes: 1035, conn_state: S3, missed_bytes: 0, src_pkts: 7, src_ip_bytes: 2140, dst_pkts: 5, dst_ip_bytes: 2338, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] attack


[User] PID: 3257, TRUN: 2, TSLPI: 20, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 3, Status: -, EXC: 0, State: R, CPU: 0.12, CMD: Web-Content

[Assistant] normal


[User] PID: 3257, MINFLT: 20528, MAJFLT: 0, VSTEXT: 193, VSIZE: 1.7, RSIZE: 164.4, VGROW: 0, RGROW: 28.3, MEM: 0.04, CMD: Web-Content

[Assistant] normal


[User] PID: 2060, RDDSK: 0, WRDSK: 0, WCANCL: 0, DSK: 0, CMD: gnome-shell, attack: 1

[Assistant] attack


[User] date: 2-Apr-19, time:  04:06:14 , current_temperature: 29.43389946, thermostat_status: 1

[Assistant] normal


[User] date: 26-Apr-19, time:  19:10:33 , FC1_Read_Input_Register: 58784, FC2_Read_Discrete_Value: 35259, FC3_Read_Holding_Register: 8372, FC4_Read_Coil: 12623

[Assistant] attack


[User] date: 26-Apr-19, time: 18:09:38, fridge_temperature: 9.8, temp_condition: high

[Assistant] attack


[User] date: 31-Mar-19, time: 12:36:58, latitude: 0.021125542, longitude: 10.00031732

[Assistant] normal


[User] PID: 1279, TRUN: 0, TSLPI: 27, TSLPU: 0, POLI: norm, NICE: 0, PRI: 120, RTPR: 0, CPUNR: 4, Status: -, EXC: 0, State: S, CPU: 0, CMD: mysqld

[Assistant] attack