[User] src_ip: 192.168.1.30, src_port: 49500, dst_ip: 192.168.1.250, dst_port: 3580, proto: tcp, service: -, duration: 0.849523, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] scanning


[User] src_ip: 192.168.1.37, src_port: 33179, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 1205, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ransomware


[User] src_ip: 192.168.1.37, src_port: 38831, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ransomware


[User] src_ip: 192.168.1.31, src_port: 60726, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.231961, src_bytes: 288, dst_bytes: 1919, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 556, dst_pkts: 6, dst_ip_bytes: 2239, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] injection


[User] src_ip: 192.168.1.30, src_port: 32932, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: -, duration: 0.000004, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ddos


[User] src_ip: 192.168.1.30, src_port: 47078, dst_ip: 192.168.1.184, dst_port: 443, proto: tcp, service: -, duration: 60.398603, src_bytes: 0, dst_bytes: 0, conn_state: S3, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 2, dst_ip_bytes: 112, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ddos


[User] src_ip: 192.168.1.190, src_port: 1438, dst_ip: 192.168.1.190, dst_port: 1438, proto: tcp, service: -, duration: 0.238141, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 39260, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 1.179922, src_bytes: 0, dst_bytes: 0, conn_state: SF, missed_bytes: 0, src_pkts: 4, src_ip_bytes: 216, dst_pkts: 2, dst_ip_bytes: 112, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] injection


[User] src_ip: 192.168.1.193, src_port: 49675, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000099, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] backdoor


[User] src_ip: 192.168.1.30, src_port: 60960, dst_ip: 192.168.1.152, dst_port: 80, proto: tcp, service: http, duration: 0.130823, src_bytes: 222, dst_bytes: 3440, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 490, dst_pkts: 6, dst_ip_bytes: 3760, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] injection


[User] src_ip: 192.168.1.193, src_port: 50073, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.00013, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] backdoor


[User] src_ip: 192.168.1.31, src_port: 48002, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 3.687815, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 4, src_ip_bytes: 208, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] injection


[User] src_ip: 192.168.1.152, src_port: 34296, dst_ip: 192.168.1.152, dst_port: 10502, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 34296, dst_ip: 192.168.1.152, dst_port: 10502, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.193, src_port: 49235, dst_ip: 192.168.1.33, dst_port: 4444, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 216, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ransomware


[User] src_ip: 192.168.1.30, src_port: 59052, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.000003, src_bytes: 48, dst_bytes: 48, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 76, dst_pkts: 1, dst_ip_bytes: 76, dns_query: 192.168.1.195/dvwa/login.php-r, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: T, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ddos


[User] src_ip: 192.168.1.30, src_port: 40120, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 1.219961, src_bytes: 340, dst_bytes: 524, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 560, dst_pkts: 4, dst_ip_bytes: 696, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] injection


[User] src_ip: 192.168.1.31, src_port: 54608, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.039074, src_bytes: 266, dst_bytes: 1919, conn_state: SF, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 586, dst_pkts: 6, dst_ip_bytes: 2239, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] injection


[User] src_ip: 192.168.1.195, src_port: 56676, dst_ip: 8.8.8.8, dst_port: 53, proto: udp, service: dns, duration: 0.393, src_bytes: 32, dst_bytes: 132, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 60, dst_pkts: 1, dst_ip_bytes: 160, dns_query: login.live.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 53930, dst_ip: 192.168.1.133, dst_port: 9594, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] scanning


[User] src_ip: 192.168.1.30, src_port: 36370, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.001309, src_bytes: 58, dst_bytes: 58, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 86, dst_pkts: 1, dst_ip_bytes: 86, dns_query: testphp.vulnweb.com/listproducts.php.hub, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: T, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ddos


[User] src_ip: 192.168.1.31, src_port: 55844, dst_ip: 192.168.1.152, dst_port: 21, proto: tcp, service: -, duration: 0.000638, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 60, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] password


[User] src_ip: 192.168.1.30, src_port: 42908, dst_ip: 192.168.1.103, dst_port: 4111, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] scanning


[User] src_ip: 192.168.1.152, src_port: 53777, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 73, dst_pkts: 0, dst_ip_bytes: 0, dns_query: shavar.services.mozilla.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 84, dst_ip: 192.168.1.190, dst_port: 84, proto: tcp, service: -, duration: 0.000012, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] dos


[User] src_ip: 192.168.1.33, src_port: 7870, dst_ip: 192.168.1.193, dst_port: 49160, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 328, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ransomware


[User] src_ip: 192.168.1.33, src_port: 4444, dst_ip: 192.168.1.193, dst_port: 49243, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 688, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ransomware


[User] src_ip: 192.168.1.193, src_port: 49400, dst_ip: 192.168.1.37, dst_port: 8080, proto: tcp, service: -, duration: 0.00018, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] backdoor


[User] src_ip: 192.168.1.30, src_port: 42, dst_ip: 192.168.1.190, dst_port: 42, proto: tcp, service: -, duration: 0.000001, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] dos


[User] src_ip: 192.168.1.33, src_port: 34401, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 184, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ransomware


[User] src_ip: 192.168.1.30, src_port: 42036, dst_ip: 192.168.1.184, dst_port: 443, proto: tcp, service: -, duration: 0.001483, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ddos


[User] src_ip: 192.168.1.32, src_port: 53921, dst_ip: 192.168.1.103, dst_port: 20005, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] scanning


[User] src_ip: 192.168.1.31, src_port: 37866, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 0.019657, src_bytes: 161, dst_bytes: 2009, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 381, dst_pkts: 5, dst_ip_bytes: 2221, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] password


[User] src_ip: 192.168.1.31, src_port: 46130, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.002021, src_bytes: 155, dst_bytes: 651, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 423, dst_pkts: 5, dst_ip_bytes: 919, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] password


[User] src_ip: 192.168.1.31, src_port: 50946, dst_ip: 192.168.1.250, dst_port: 4998, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] scanning


[User] src_ip: 192.168.1.32, src_port: 61172, dst_ip: 192.168.1.186, dst_port: 1042, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] scanning


[User] src_ip: 192.168.1.30, src_port: 36108, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 69.268095, src_bytes: 0, dst_bytes: 0, conn_state: SF, missed_bytes: 0, src_pkts: 4, src_ip_bytes: 216, dst_pkts: 3, dst_ip_bytes: 164, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] injection


[User] src_ip: 192.168.1.30, src_port: 49505, dst_ip: 192.168.1.250, dst_port: 1972, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] scanning


[User] src_ip: 192.168.1.30, src_port: 91, dst_ip: 192.168.1.184, dst_port: 91, proto: tcp, service: -, duration: 0.000122, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] dos


[User] src_ip: 192.168.1.30, src_port: 62946, dst_ip: 192.168.1.133, dst_port: 5989, proto: tcp, service: -, duration: 0.142831, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] scanning


[User] src_ip: 192.168.1.180, src_port: 35077, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.01156, src_bytes: 88, dst_bytes: 212, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 144, dst_pkts: 2, dst_ip_bytes: 268, dns_query: 89.80.13.103.in-addr.arpa, dns_qclass: 1, dns_qtype: 12, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 59556, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: -, duration: 0.000022, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ddos


[User] src_ip: 192.168.1.31, src_port: 53726, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 0.01254, src_bytes: 155, dst_bytes: 978, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 375, dst_pkts: 4, dst_ip_bytes: 1150, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] password


[User] src_ip: 192.168.1.32, src_port: 61178, dst_ip: 192.168.1.133, dst_port: 212, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] scanning


[User] src_ip: 192.168.1.32, src_port: 53998, dst_ip: 192.168.1.79, dst_port: 587, proto: tcp, service: -, duration: 0.002765, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] scanning


[User] src_ip: 192.168.1.152, src_port: 55895, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000043, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 41213, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000059, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 62946, dst_ip: 192.168.1.250, dst_port: 8002, proto: tcp, service: -, duration: 0.317708, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] scanning


[User] src_ip: 192.168.1.193, src_port: 49753, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000194, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] backdoor


[User] src_ip: 192.168.1.193, src_port: 49746, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000116, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] backdoor


[User] src_ip: 192.168.1.30, src_port: 57744, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: -, duration: 0.000522, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ddos


[User] src_ip: 192.168.1.30, src_port: 49728, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.001901, src_bytes: 167, dst_bytes: 2875, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 435, dst_pkts: 6, dst_ip_bytes: 3195, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] password


[User] src_ip: 192.168.1.30, src_port: 49668, dst_ip: 192.168.1.250, dst_port: 993, proto: tcp, service: -, duration: 0.476133, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] scanning


[User] src_ip: 192.168.1.32, src_port: 36496, dst_ip: 52.28.231.150, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] xss


[User] src_ip: 192.168.1.30, src_port: 43990, dst_ip: 192.168.1.184, dst_port: 443, proto: tcp, service: -, duration: 0.000631, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ddos


[User] src_ip: 192.168.1.152, src_port: 45639, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.00002, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 46430, dst_ip: 192.168.1.184, dst_port: 443, proto: tcp, service: -, duration: 0.000313, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ddos


[User] src_ip: 192.168.1.30, src_port: 57804, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: -, duration: 0.003576, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ddos


[User] src_ip: 192.168.1.152, src_port: 55770, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000053, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 23, dst_ip: 192.168.1.194, dst_port: 23, proto: tcp, service: -, duration: 0.000016, src_bytes: 0, dst_bytes: 0, conn_state: RSTO, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 80, dst_pkts: 1, dst_ip_bytes: 44, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] dos


[User] src_ip: 192.168.1.33, src_port: 44215, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 76, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ransomware


[User] src_ip: 192.168.1.30, src_port: 69, dst_ip: 192.168.1.184, dst_port: 69, proto: tcp, service: -, duration: 0.000146, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] dos


[User] src_ip: 192.168.1.31, src_port: 50390, dst_ip: 52.59.177.21, dst_port: 80, proto: tcp, service: http, duration: 1.36169, src_bytes: 462, dst_bytes: 12183, conn_state: SF, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 782, dst_pkts: 12, dst_ip_bytes: 12815, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] injection


[User] src_ip: 192.168.1.190, src_port: 1374, dst_ip: 192.168.1.190, dst_port: 1374, proto: tcp, service: -, duration: 0.222839, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 38396, dst_ip: 192.168.1.250, dst_port: 53, proto: tcp, service: -, duration: 0.003925, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] scanning


[User] src_ip: 192.168.1.30, src_port: 23, dst_ip: 192.168.1.193, dst_port: 23, proto: tcp, service: -, duration: 0.000002, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] dos


[User] src_ip: 192.168.1.31, src_port: 52036, dst_ip: 52.59.177.21, dst_port: 80, proto: tcp, service: http, duration: 1.259023, src_bytes: 322, dst_bytes: 12183, conn_state: SF, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 642, dst_pkts: 13, dst_ip_bytes: 12867, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] injection


[User] src_ip: 192.168.1.32, src_port: 53698, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] xss


[User] src_ip: 192.168.1.30, src_port: 22, dst_ip: 192.168.1.190, dst_port: 22, proto: tcp, service: -, duration: 0.000005, src_bytes: 0, dst_bytes: 0, conn_state: RSTO, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 80, dst_pkts: 1, dst_ip_bytes: 44, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] dos


[User] src_ip: 192.168.1.32, src_port: 53921, dst_ip: 192.168.1.152, dst_port: 3659, proto: tcp, service: -, duration: 0.00378, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] scanning


[User] src_ip: 192.168.1.32, src_port: 52032, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: -, duration: 125.248382, src_bytes: 0, dst_bytes: 3465, conn_state: RSTRH, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 80, dst_pkts: 5, dst_ip_bytes: 3665, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] xss


[User] src_ip: 192.168.1.152, src_port: 34296, dst_ip: 192.168.1.152, dst_port: 10502, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.32, src_port: 40732, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] xss


[User] src_ip: 192.168.1.30, src_port: 35600, dst_ip: 52.59.177.21, dst_port: 80, proto: tcp, service: http, duration: 1.082463, src_bytes: 237, dst_bytes: 12183, conn_state: SF, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 557, dst_pkts: 12, dst_ip_bytes: 12815, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] injection


[User] src_ip: 192.168.1.31, src_port: 38260, dst_ip: 192.168.1.184, dst_port: 443, proto: tcp, service: -, duration: 60.87192, src_bytes: 0, dst_bytes: 0, conn_state: S3, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 2, dst_ip_bytes: 112, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ddos


[User] src_ip: 192.168.1.133, src_port: 5353, dst_ip: 224.0.0.251, dst_port: 5353, proto: udp, service: dns, duration: 4.085514, src_bytes: 270, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 3, src_ip_bytes: 354, dst_pkts: 0, dst_ip_bytes: 0, dns_query: _sleep-proxy._udp.local, dns_qclass: 32769, dns_qtype: 12, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 38080, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 0.041299, src_bytes: 199, dst_bytes: 1486, conn_state: SF, missed_bytes: 0, src_pkts: 9, src_ip_bytes: 579, dst_pkts: 8, dst_ip_bytes: 1818, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ddos


[User] src_ip: 192.168.1.31, src_port: 48320, dst_ip: 18.184.104.180, dst_port: 80, proto: tcp, service: http, duration: 1.431535, src_bytes: 542, dst_bytes: 12183, conn_state: SF, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 862, dst_pkts: 12, dst_ip_bytes: 12815, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] injection


[User] src_ip: 192.168.1.34, src_port: 56744, dst_ip: 13.211.4.94, dst_port: 443, proto: tcp, service: ssl, duration: 12.487629, src_bytes: 1745, dst_bytes: 6505, conn_state: SF, missed_bytes: 0, src_pkts: 18, src_ip_bytes: 2713, dst_pkts: 19, dst_ip_bytes: 7621, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] mitm


[User] src_ip: 192.168.1.32, src_port: 35632, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 52, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] xss


[User] src_ip: 192.168.1.152, src_port: 1880, dst_ip: 192.168.1.152, dst_port: 51782, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.184, src_port: 8080, dst_ip: 192.168.1.184, dst_port: 1501, proto: tcp, service: -, duration: 0.270886, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.152, src_port: 34296, dst_ip: 192.168.1.152, dst_port: 10502, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 35262, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.002093, src_bytes: 154, dst_bytes: 501, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 422, dst_pkts: 5, dst_ip_bytes: 769, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] password


[User] src_ip: 192.168.1.31, src_port: 36738, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 0.218898, src_bytes: 542, dst_bytes: 524, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 762, dst_pkts: 4, dst_ip_bytes: 696, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] injection


[User] src_ip: 192.168.1.37, src_port: 43705, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 1205, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ransomware


[User] src_ip: 192.168.1.152, src_port: 34296, dst_ip: 192.168.1.152, dst_port: 10502, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 69, dst_ip: 192.168.1.184, dst_port: 69, proto: tcp, service: -, duration: 0.000001, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] dos


[User] src_ip: 192.168.1.193, src_port: 49404, dst_ip: 192.168.1.195, dst_port: 5357, proto: tcp, service: http, duration: 0.003397, src_bytes: 954, dst_bytes: 2370, conn_state: SF, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 1206, dst_pkts: 5, dst_ip_bytes: 2582, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 42908, dst_ip: 192.168.1.152, dst_port: 9666, proto: tcp, service: -, duration: 0.011013, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] scanning


[User] src_ip: 192.168.1.30, src_port: 52644, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 0.016605, src_bytes: 155, dst_bytes: 978, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 375, dst_pkts: 4, dst_ip_bytes: 1150, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] password


[User] src_ip: 192.168.1.30, src_port: 41268, dst_ip: 192.168.1.184, dst_port: 443, proto: tcp, service: -, duration: 61.121151, src_bytes: 0, dst_bytes: 0, conn_state: S3, missed_bytes: 0, src_pkts: 3, src_ip_bytes: 164, dst_pkts: 2, dst_ip_bytes: 112, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ddos


[User] src_ip: 192.168.1.152, src_port: 52644, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.00002, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 41287, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.00001, src_bytes: 58, dst_bytes: 58, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 86, dst_pkts: 1, dst_ip_bytes: 86, dns_query: testphp.vulnweb.com/listproducts.php.hub, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: T, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ddos


[User] src_ip: 192.168.1.152, src_port: 56983, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000023, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 50948, dst_ip: 192.168.1.49, dst_port: 5226, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] scanning


[User] src_ip: 192.168.1.180, src_port: 41398, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.002539, src_bytes: 41, dst_bytes: 89, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 69, dst_pkts: 1, dst_ip_bytes: 117, dns_query: elasticsearch.mydns.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 42908, dst_ip: 192.168.1.195, dst_port: 2045, proto: tcp, service: -, duration: 0.004371, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 88, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] scanning


[User] src_ip: 192.168.1.152, src_port: 43641, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000023, src_bytes: 130, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 186, dst_pkts: 0, dst_ip_bytes: 0, dns_query: a2z3kk2ebqzso7.iot.ap-southeast-2.amazonaws.com, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 38144, dst_ip: 192.168.1.133, dst_port: 4003, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] scanning


[User] src_ip: 192.168.1.30, src_port: 80, dst_ip: 192.168.1.184, dst_port: 80, proto: tcp, service: -, duration: 0.000054, src_bytes: 0, dst_bytes: 0, conn_state: RSTO, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 80, dst_pkts: 1, dst_ip_bytes: 44, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] dos


[User] src_ip: 192.168.1.30, src_port: 83, dst_ip: 192.168.1.184, dst_port: 83, proto: tcp, service: -, duration: 0.000199, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] dos


[User] src_ip: 192.168.1.36, src_port: 35424, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 6.025659, src_bytes: 1756, dst_bytes: 1035, conn_state: S3, missed_bytes: 0, src_pkts: 7, src_ip_bytes: 2436, dst_pkts: 5, dst_ip_bytes: 1315, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] xss


[User] src_ip: 192.168.1.30, src_port: 77, dst_ip: 192.168.1.193, dst_port: 77, proto: tcp, service: -, duration: 0.00141, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] dos


[User] src_ip: 192.168.1.31, src_port: 53096, dst_ip: 192.168.1.152, dst_port: 80, proto: tcp, service: http, duration: 0.1086, src_bytes: 229, dst_bytes: 3440, conn_state: SF, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 549, dst_pkts: 7, dst_ip_bytes: 3812, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] injection


[User] src_ip: 192.168.1.30, src_port: 56472, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: -, duration: 0.000356, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ddos


[User] src_ip: 192.168.1.30, src_port: 45908, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: http, duration: 0.000037, src_bytes: 155, dst_bytes: 216, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 423, dst_pkts: 5, dst_ip_bytes: 484, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] password


[User] src_ip: 192.168.1.31, src_port: 41644, dst_ip: 18.184.104.180, dst_port: 80, proto: tcp, service: http, duration: 1.145988, src_bytes: 251, dst_bytes: 12183, conn_state: SF, missed_bytes: 0, src_pkts: 6, src_ip_bytes: 571, dst_pkts: 12, dst_ip_bytes: 12815, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] injection


[User] src_ip: 192.168.1.190, src_port: 1459, dst_ip: 192.168.1.190, dst_port: 1459, proto: tcp, service: -, duration: 0.180702, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.37, src_port: 4444, dst_ip: 192.168.1.193, dst_port: 49218, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 168, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ransomware


[User] src_ip: 192.168.1.193, src_port: 52720, dst_ip: 224.0.0.252, dst_port: 5355, proto: udp, service: dns, duration: 0.101144, src_bytes: 50, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 106, dst_pkts: 0, dst_ip_bytes: 0, dns_query: wininst, dns_qclass: 1, dns_qtype: 255, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.31, src_port: 54774, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.135253, src_bytes: 64, dst_bytes: 292, conn_state: SF, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 120, dst_pkts: 2, dst_ip_bytes: 348, dns_query: www.vmware.com, dns_qclass: 1, dns_qtype: 1, dns_rcode: 0, dns_AA: F, dns_RD: T, dns_RA: T, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] password


[User] src_ip: 192.168.1.30, src_port: 12, dst_ip: 192.168.1.190, dst_port: 12, proto: tcp, service: -, duration: 0.000131, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] dos


[User] src_ip: 192.168.1.31, src_port: 50945, dst_ip: 192.168.1.250, dst_port: 687, proto: tcp, service: -, duration: 0.540498, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] scanning


[User] src_ip: 192.168.1.33, src_port: 42775, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 1500, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ransomware


[User] src_ip: 192.168.1.33, src_port: 46675, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 1205, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ransomware


[User] src_ip: 192.168.1.32, src_port: 37302, dst_ip: 176.28.50.165, dst_port: 80, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 60, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] xss


[User] src_ip: 192.168.1.30, src_port: 60885, dst_ip: 192.168.1.1, dst_port: 53, proto: udp, service: dns, duration: 0.000026, src_bytes: 52, dst_bytes: 52, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 80, dst_pkts: 1, dst_ip_bytes: 80, dns_query: 192.168.1.195/dvwa/login.php-r.hub, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: T, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ddos


[User] src_ip: 192.168.1.30, src_port: 55950, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: -, duration: 0.000297, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ddos


[User] src_ip: 192.168.1.30, src_port: 56, dst_ip: 192.168.1.193, dst_port: 56, proto: tcp, service: -, duration: 0.000387, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] dos


[User] src_ip: 192.168.1.31, src_port: 43200, dst_ip: 192.168.1.152, dst_port: 80, proto: tcp, service: http, duration: 0.002108, src_bytes: 153, dst_bytes: 463, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 421, dst_pkts: 5, dst_ip_bytes: 731, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] password


[User] src_ip: 192.168.1.193, src_port: 49909, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000019, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] backdoor


[User] src_ip: 192.168.1.32, src_port: 35490, dst_ip: 192.168.1.49, dst_port: 1840, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 44, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] scanning


[User] src_ip: 192.168.1.193, src_port: 49500, dst_ip: 192.168.1.33, dst_port: 80, proto: tcp, service: -, duration: 0.000354, src_bytes: 0, dst_bytes: 0, conn_state: REJ, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 48, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] backdoor


[User] src_ip: 192.168.1.30, src_port: 51298, dst_ip: 192.168.1.152, dst_port: 80, proto: tcp, service: http, duration: 0.001575, src_bytes: 153, dst_bytes: 463, conn_state: SF, missed_bytes: 0, src_pkts: 5, src_ip_bytes: 421, dst_pkts: 5, dst_ip_bytes: 731, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] password


[User] src_ip: 192.168.1.184, src_port: 8080, dst_ip: 192.168.1.184, dst_port: 1479, proto: tcp, service: -, duration: 0.183824, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 120, src_ip_bytes: 4800, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.180, src_port: 46645, dst_ip: 192.168.1.190, dst_port: 53, proto: udp, service: dns, duration: 0.000685, src_bytes: 31, dst_bytes: 106, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 59, dst_pkts: 1, dst_ip_bytes: 134, dns_query: elasticsearch, dns_qclass: 1, dns_qtype: 1, dns_rcode: 3, dns_AA: F, dns_RD: T, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 2405:6e00:10ce:2c00:20c:29ff:feee:e07a, src_port: 26479, dst_ip: 2001:dcd:3::2, dst_port: 53, proto: udp, service: dns, duration: 0.036949, src_bytes: 52, dst_bytes: 285, conn_state: SF, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 100, dst_pkts: 1, dst_ip_bytes: 333, dns_query: ari.alpha.aridns.net.au, dns_qclass: 1, dns_qtype: 28, dns_rcode: 0, dns_AA: T, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: DNS_RR_unknown_type, weird_addl: 46, weird_notice: F

[Assistant] normal


[User] src_ip: 192.168.1.30, src_port: 59202, dst_ip: 192.168.1.190, dst_port: 80, proto: tcp, service: -, duration: 0.0061, src_bytes: 0, dst_bytes: 0, conn_state: S1, missed_bytes: 0, src_pkts: 2, src_ip_bytes: 112, dst_pkts: 1, dst_ip_bytes: 60, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ddos


[User] src_ip: 192.168.1.33, src_port: 7870, dst_ip: 192.168.1.193, dst_port: 49165, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: SH, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 40, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ransomware


[User] src_ip: 192.168.1.152, src_port: 34296, dst_ip: 192.168.1.152, dst_port: 10502, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: OTH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 0, dst_ip_bytes: 0, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.6, src_port: 5353, dst_ip: 224.0.0.251, dst_port: 5353, proto: udp, service: dns, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: S0, missed_bytes: 0, src_pkts: 1, src_ip_bytes: 89, dst_pkts: 0, dst_ip_bytes: 0, dns_query: _googlecast._tcp.local, dns_qclass: 1, dns_qtype: 12, dns_rcode: 0, dns_AA: F, dns_RD: F, dns_RA: F, dns_rejected: F, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] normal


[User] src_ip: 192.168.1.33, src_port: 33941, dst_ip: 192.168.1.193, dst_port: 445, proto: tcp, service: -, duration: 0, src_bytes: 0, dst_bytes: 0, conn_state: RSTRH, missed_bytes: 0, src_pkts: 0, src_ip_bytes: 0, dst_pkts: 1, dst_ip_bytes: 40, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] ransomware


[User] src_ip: 192.168.1.32, src_port: 58694, dst_ip: 192.168.1.195, dst_port: 80, proto: tcp, service: http, duration: 129.383683, src_bytes: 2761, dst_bytes: 3500, conn_state: RSTR, missed_bytes: 3500, src_pkts: 6, src_ip_bytes: 3021, dst_pkts: 4, dst_ip_bytes: 172, dns_query: -, dns_qclass: 0, dns_qtype: 0, dns_rcode: 0, dns_AA: -, dns_RD: -, dns_RA: -, dns_rejected: -, ssl_version: -, ssl_cipher: -, ssl_resumed: -, ssl_established: -, ssl_subject: -, ssl_issuer: -, http_trans_depth: -, http_method: -, http_uri: -, http_version: -, http_request_body_len: 0, http_response_body_len: 0, http_status_code: 0, http_user_agent: -, http_orig_mime_types: -, http_resp_mime_types: -, weird_name: -, weird_addl: -, weird_notice: -

[Assistant] xss